Vulnerability in Opencti-platform Opencti
CVE-2024-26139
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low p…
EPSS: 0.002 (36.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L.
Affected products
- Opencti-platform Opencti — versions <= 5.12.31
Weakness classification (CWE)
Public proof-of-concept exploits
References
- https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-qx4j-f4f2-vjw9 (x_refsource_CONFIRM)
Frequently asked questions
- What is CVE-2024-26139?
- CVE-2024-26139 is a high-severity vulnerability in Opencti-platform Opencti, classified under Improper Access Control. CVSS score: 8.3/10. Published 2024-05-23.
- How severe is CVE-2024-26139?
- High severity. CVSS v3 base score is 8.3 out of 10.
- Is CVE-2024-26139 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.