Citeum Opencti vulnerabilities
22 known vulnerabilities affecting citeum/opencti.
Total CVEs
22
CISA KEV
0
Public exploits
2
Exploited in wild
1
Severity breakdown
CRITICAL3HIGH10MEDIUM9
Vulnerabilities
Page 2 of 2
CVE-2022-30289P4MEDIUMCVSS 5.4≤ 5.2.42022-07-05
CVE-2022-30289 [MEDIUM] CWE-79 CVE-2022-30289: A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of
A stored Cross-site Scripting (XSS) vulnerability was identified in the Data Import functionality of OpenCTI through 5.2.4. An attacker can abuse the vulnerability to upload a malicious file that will then be executed by a victim when they open the file location.
nvd
CVE-2024-45805P4MEDIUMCVSS 4.3fixed in 6.3.02024-12-26
CVE-2024-45805 [MEDIUM] CWE-200 CVE-2024-45805: OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access
OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http:///storage/get/support/UUID/UUID.zip), and that the UUID
nvd
← Previous2 / 2