What’s Vulnerable › Vulnerabilities

CVE-2021-37742

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-07-30 · updated 2026-06-22
• Weakness: CWE-79

Description

app/View/Elements/GalaxyClusters/view_relation_tree.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster relationships.

Affected products

• MISP: 2.4.147

References

• https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192
• https://zigrin.com/advisories/misp-stored-xss-when-viewing-galaxy-cluster-relationships/
• https://github.com/MISP/MISP/commit/af50add82433eb2a740c3621b99d9d14d2b1e192
• https://zigrin.com/advisories/misp-stored-xss-when-viewing-galaxy-cluster-relationships/

Get alerted when CVE-2021-37742 or the next vulnerability affects your stack