CVE-2021-37742

43th percentile - higher than 43% of all known CVEs

In MISP version 2.4.147, there is a stored XSS vulnerability in the view_relation_tree.ctp file, allowing malicious code execution when viewing galaxy cluster relationships.

An attacker can exploit this vulnerability to inject malicious scripts, potentially leading to user data theft or session hijacking.

It is recommended to update MISP to the latest version to mitigate this vulnerability and to review and filter input data to prevent XSS attacks.