Misp · Misp · CVE-2024-54675
**Name of the Vulnerable Software and Affected Versions**
MISP versions through 2.5.2
**Description**
The issue is related to stored Cross Site Scripting (XSS) in the editor interface for an ad-hoc workflow, specifically in the file app/webroot/js/workflows-editor/workflows-editor.js.
**Recommendations**
For versions through 2.5.2, consider disabling the workflows-editor interface until a patch is available. Restrict access to the app/webroot/js/workflows-editor/workflows-editor.js file to minimize the risk of exploitation.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.