VULNERABILITY INTELLIGENCE

CVE-2024-26139

CVSS score8.3 HIGH
EPSS probability0.40%
CISA KEVNot currently listed
Published2024-05-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L

Description

OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.

Weakness classification

  • security-advisories@github.com: CWE-284
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references