Reflected Cross-Site Scripting Vulnerability in MISP Workflow Module

CVE-2026-112184

What is CVE-2026-112184?

The MISP platform contains a reflected cross-site scripting vulnerability within its workflow module interface. The issue arises when parameter names returned by the misp-modules service are rendered directly as HTML form labels on the workflow module page without adequate output encoding. This lack of encoding allows an attacker, capable of influencing the parameter names, to inject arbitrary HTML or JavaScript code. Consequently, when an authenticated user views the affected page, the injected script executes within their browser context, posing a risk of session token theft, interface manipulation, or triggering unauthorized actions on behalf of the user.

References