https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 19:10:28 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-207738 EUVD-2026-207738 https://cve.radiocsirt.org/vuln/euvd-2026-207738 https://cve.radiocsirt.org/vuln/fkie_cve-2024-45805 <p>OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http://&lt;opencti_domain&gt;/storage/get/support/UUID/UUID.zip), and that the UUID is available to general users using an attached query (logs query). This vulnerability is fixed in 6.3.0.</p> <p>OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http://&lt;opencti_domain&gt;/storage/get/support/UUID/UUID.zip), and that the UUID is available to general users using an attached query (logs query). This vulnerability is fixed in 6.3.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-45805 https://cve.radiocsirt.org/vuln/pysec-2024-298 <p><strong>Affected:</strong> PyPI: pycti</p> <p>OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http://&lt;opencti_domain&gt;/storage/get/support/UUID/UUID.zip), and that the UUID is available to general users using an attached query (logs query). This vulnerability is fixed in 6.3.0.</p> <p><strong>Affected:</strong> PyPI: pycti</p> <p>OpenCTI is an open-source cyber threat intelligence platform. Before 6.3.0, general users can access information that can only be accessed by users with access privileges to admin and support information (SETTINGS_SUPPORT). This is due to inadequate access control for support information (http://&lt;opencti_domain&gt;/storage/get/support/UUID/UUID.zip), and that the UUID is available to general users using an attached query (logs query). This vulnerability is fixed in 6.3.0.</p> https://cve.radiocsirt.org/vuln/pysec-2024-298