A vulnerability categorized as problematic has been discovered in MISP up to 2.5.27. The impacted element is an unknown function of the file app/View/Elements/Workflows/executionPath.ctp. Executing manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2025-67906. The attack can be launched remotely. No exploit exists.
It is advisable to upgrade the affected component.
