https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-15T22:48:54.324882+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-45805 CVE-2024-45805 — OpenCTI leaks support information due to inadequate access control 2026-10-15T22:48:54.339744+00:00

Affected: OpenCTI-Platform opencti

OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http://<opencti_domain>/storage/get/support/UUID/UUID.zip), and that the UUID is available to general users using an attached query (logs query). This vulnerability is fixed in 6.3.0.