We are pleased to announce the immediate availability of MISP v2.4.164 with a new tag relationship features, many improvements and a security fix.

New tag relationship feature

Relationship can now be added to any attribute tag or event tag. This works with tags and galaxy clusters. The new feature is available in event view.

The tag relationship feature is also exposed in the API under the endpoint /tags/modifyTagRelationship/[scope]/[id] where scope is the attribute/event and id is the id of the EventTag / AttributeTag object.

Improvements and bug fixes

• [periodic_report] Added security recommendations section showing course of actions related to attack techniques.
• [workflow] add support for local and relationship in workflow.
• [API/galaxyCluster/restSearch] Allow multiple filtering conditions to be used at once.
• [EventGraph] Added entity comment in the graph as tooltip and support of comment in searches.
• [UI] Many improvements and optimisation.

CVE-2022-42724

This release fix a security vulnerabilities (CVE-2022-42724) which allows org admin to discover role names which should have been restricted to site admin.

We strongly recommend MISP administrator to update to this latest version.

For a more detailed changelog, please see the online Changelog.