CVE-2025-67906
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
Published Dec 15, 2025 · updated Oct 14, 2026 · misp-project misp
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
Code
The project this record applies to. Exploit listings stay in References.
Timeline
Detection, updates, and resolution for this record.
Dec 15, 2025 · NIST NVD
Detected
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
Oct 14, 2026 · NIST NVD
Updated
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
Affected
- cpe misp-project/mispversion unspecified
Sources
- CVE.orgVulnerability recordCVE-2025-67906
Official CVE identifier
cve.org - FIRST EPSSExploitation probabilityCVE-2025-67906
30-day exploitation probability 0.3%
first.org - NIST NVDVulnerability recordCVE-2025-67906
In MISP before 2.5.28, app/View/Elements/Workflows/executionPath.ctp allows XSS in the workflow execution path.
nvd.nist.gov