CVE-2024-58129 MEDIUM

CVE-2024-58129

Vendor Misp

Product MISP

Weakness CWE-79 · XSS

Published March 28, 2025

Last update March 31, 2025

View on NVD All CVEs

CVSS base score

5.5/10

Attack vector Network

Attack complexity Low

Privileges required High

User interaction None

Confidentiality Low

Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In MISP before 2.4.193, menu_custom_right_link_html parameters can be set via the UI (i.e., without using the CLI) and thus attackers with admin privileges can conduct XSS attacks against every page.

Key dates

02Disclosure timeline

March 28, 2025 CVE published

March 31, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2024-58129 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-6301 SourceCodester Best Courier Management System GET Parameter parcel_list.php cross site scripting CVE-2024-20273 Cisco Firepower Management Center Software Cross-Site Scripting Vulnerability CVE-2025-41768 Beckhoff: XSS Vulnerability in TwinCAT 3 HMI Server CVE-2024-4526 Campcodes Complete Web-Based School Management System student_payment_details3.php cross site scripting CVE-2026-1421 code-projects Online Examination System Add Pages cross site scripting