CVE-2021-37743: Misp-Project Misp

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

app/View/GalaxyElements/ajax/index.ctp in MISP 2.4.147 allows Stored XSS when viewing galaxy cluster elements in JSON format.

Affected products

• Misp-Project Misp: version 2.4.147 only

Published 2021-07-30. Last modified 2026-06-22.