CVE-2020-28947

Name of the Vulnerable Software and Affected Versions MISP version 2.4.134

Description The issue exists in the template element index view due to the mishandling of the id parameter, leading to a cross-site scripting (XSS) problem.

Recommendations For MISP version 2.4.134, consider restricting access to the template element index view until a patch is available, and avoid using the id parameter in this view to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.