CVE-2024-58129

4.8 mediumEPSS 0.2%

Medium (4.8) in misp-project misp. EPSS 0.2% chance of exploitation in the next 30 days.

In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page.

Severity

CVSS 3.1

4.8 medium

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 13% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2025-03-28
Modified: 2026-06-22
Record from: the NVD, synced 2026-10-19

Affected

misp-project:misp

References

https://github.com/MISP/MISP/commit/09a43870e733f79ffa33753ddc7bce3cbb5a5647
https://github.com/MISP/MISP/releases/tag/v2.4.193

Check your stack JSON