← All advisories

Medium severity5.4OSV Advisory· Published Dec 15, 2025· Updated Jun 22, 2026

CVE-2025-67906

CVE-2025-67906

Description

In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Misp/MispOSV3 versions
codename/tellurium, rm, v0.2, …+ 2 more
- (no CPE)range: codename/tellurium, rm, v0.2, …
- cpe:2.3:a:misp-project:misp:*:*:*:*:*:*:*:*range: <2.5.28
- (no CPE)range: <2.5.28

Patches

Vulnerability mechanics

References

3

github.com/MISP/MISP/commit/1f39deb572da7ecb5855e30ff3cc8cbcaa0c1054nvdPatch
vulnerability.circl.lu/vuln/gcve-1-2025-0031nvdThird Party Advisory
github.com/MISP/MISP/compare/v2.5.27...v2.5.28nvdRelease Notes

News mentions

0

No linked articles in our index yet.