diff --git a/_posts/2020-03-10-MISP.2.4.123.released.md b/_posts/2020-03-10-MISP.2.4.123.released.md index 62504c5..5f66953 100644 --- a/_posts/2020-03-10-MISP.2.4.123.released.md +++ b/_posts/2020-03-10-MISP.2.4.123.released.md @@ -1,7 +1,7 @@ --- title: MISP 2.4.123 released (aka the dashboard and security fix release) layout: post -featured: /assets/images/misp/blog/t-misp-overview.png +featured: /assets/images/misp/blog/dashboard.png --- # MISP 2.4.123 released @@ -12,12 +12,12 @@ A new version of MISP ([2.4.123](https://github.com/MISP/MISP/tree/v2.4.123)) ha Thanks to a pentest conducted on behalf of the Centre for Cyber Security Belgium (CCB), we have received a list of ideas to improve our security posture along with 2 vulnerabilities: - - 2 XSS vulnerabilities (reported and fixed, more info via CVE-2020-10246 and CVE-2020-10247) + - 2 XSS vulnerabilities (reported and fixed, more info via [CVE-2020-10246](/security) and [CVE-2020-10247](/security)) - various improvements for our password policy - Improvements by adding preventative headers - Providing the more information to the users by revealing potential foul play -We would hereby like to thank both the contracted part as well as CCB for sharing the results with us. We are always glad to receive pentest results, it's a great way for organisations to improve the security of MISP and we highly encourage everyone to MISP for potential issues and to let us know - we will do our best to fix any identified issues as soon as possible. +We would hereby like to thank both the contracted part as well as CCB for sharing the results with us. We are always glad to receive pentest results, it's a great way for organisations to improve the security of MISP and we highly encourage everyone to MISP for potential issues and to [let us know](/security) - we will do our best to fix any identified issues as soon as possible. # Dashboard system