CVE-2021-35502

CriticalCVSS 9.8

Published: 25/06/2021(UTC)Updated: 22/06/2026(UTC)Translated: 23/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.09%

61th percentile - higher than 61% of all known CVEs

Summary

In MISP version 2.4.144, the file app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp does not sanitize certain data related to generic-template:index.

Risk Assessment

The lack of data sanitization may lead to XSS attacks, posing a threat to the application's security and user data.

Recommendation

It is recommended to update to the latest version of MISP and implement appropriate data sanitization mechanisms.

Original NVD description (English source)

app/View/Elements/genericElements/IndexTable/Fields/generic_field.ctp in MISP 2.4.144 does not sanitize certain data related to generic-template:index.