CVE-2023-37307: Misp-Project Misp

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

In MISP before 2.4.172, title_for_layout is not properly sanitized in Correlations, CorrelationExclusions, and Layouts.

Affected products

• Misp-Project Misp: before 2.4.172 (fixed in 2.4.172)

Published 2023-06-30. Last modified 2026-06-23.