Vulnerability Details CVE-2021-3184
MISP 2.4.136 has XSS via a crafted URL to the app/View/Elements/global_menu.ctp user homepage favourite button.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 50.8%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2021-3184
-
cpe:2.3:a:misp-project:misp:2.4.136