CVE-2022-27246: Misp-Project Misp

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

An issue was discovered in MISP before 2.4.156. An SVG org logo (which may contain JavaScript) is not forbidden by default.

Affected products

• Misp-Project Misp: before 2.4.156 (fixed in 2.4.156)

Published 2022-03-18. Last modified 2026-06-22.