CVE-2022-27244

Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.156

Description An issue was discovered where a malicious site administrator could store an XSS payload in the custom auth name. This payload would be executed each time the administrator modifies a user.

Recommendations For versions prior to 2.4.156, update to version 2.4.156 or later to resolve the issue. As a temporary workaround, consider restricting access to the custom auth name field to minimize the risk of exploitation.