Citeum OpenCTI any version

OpenCTI privilege escalation and unauthenticated access via default admin account

OpenCTI has remote code execution and sensitive secrets exposed through web hook

OpenCTI affected by RCE via notifier template

GraphQL IDOR allows authenticated user to delete workspace content of other users

OpenCTI Authenticated Privilege Escalation

OpenCTI May Bypass Introspection Restriction

OpenCTI's lack of Rate Limit lead to OTP brute forcing

OpenCTI's GraphQL Mutations Allow Deletion of Unrelated Entities

OpenCTI has a Semi-Blind SSRF via Unvalidated External URL in Data Ingestion Feature

OpenCTI vulnerable to Denial of Service through web hook

In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their registered e-mail address as well as their API key, even though such action is not possible through the interface, legitimately.

OpenCTI: Privilege escalation via graphQL API abusable by organization admins, due to incorrect ACL on userEdit relationAdd

OpenCTI: Authorization Bypass via `synchronized-upsert` HTTP Header Injection

OpenCTI: Elasticsearch Painless Script Injection via GraphQL `script` filter operator allows authenticated user to exfiltrate data and cause DoS

OpenCTI bypass of protected attribute update

Open Redirect in OpenCTI's SAML Authentication Flow

OpenCTI has XSS in the rendering of email-message observable body data

A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will then be executed by a victim when they open the file location.

OpenCTI's GraphQL IDOR enables authenticated users to modify or delete notifications of other users

OpenCTI leaks support information due to inadequate access control