Vulnerability-Lookup

Search criteria

Vendor

Product

Assigner (CNA or root)

Sources

Sort by

Order

CVSS min

CVSS max

Apply ordering (override relevance)

CVE-2025-61782 (GCVE-0-2025-61782)

Vulnerability from cvelistv5 – Published: 2026-01-07 17:28 – Updated: 2026-01-07 18:12

Title

Open Redirect in OpenCTI's SAML Authentication Flow

Summary

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.

Severity

5.4 (Medium)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-01-07 18:12 UTC

CWE

CWE-601 - URL Redirection to Untrusted Site ('Open Redirect')

Assigner

GitHub_M mitre root Scorecard

References

3 references

URL	Tags
https://github.com/OpenCTI-Platform/opencti/secur…	x_refsource_CONFIRM
https://github.com/OpenCTI-Platform/opencti/commi…	x_refsource_MISC
https://github.com/OpenCTI-Platform/opencti/relea…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
OpenCTI-Platform	opencti	Affected: < 6.8.3

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-61782",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-01-07T18:12:40.375776Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-01-07T18:12:58.971Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "opencti",
          "vendor": "OpenCTI-Platform",
          "versions": [
            {
              "status": "affected",
              "version": "\u003c 6.8.3"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform\u0027s SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "NONE",
            "baseScore": 5.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "LOW",
            "integrityImpact": "LOW",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-601",
              "description": "CWE-601: URL Redirection to Untrusted Site (\u0027Open Redirect\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-01-07T17:28:53.599Z",
        "orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
        "shortName": "GitHub_M"
      },
      "references": [
        {
          "name": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-jc3f-c62g-v7qw",
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-jc3f-c62g-v7qw"
        },
        {
          "name": "https://github.com/OpenCTI-Platform/opencti/commit/f755165a26888925c4a58018f7238ff92a0bd378",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenCTI-Platform/opencti/commit/f755165a26888925c4a58018f7238ff92a0bd378"
        },
        {
          "name": "https://github.com/OpenCTI-Platform/opencti/releases/tag/6.8.3",
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/OpenCTI-Platform/opencti/releases/tag/6.8.3"
        }
      ],
      "source": {
        "advisory": "GHSA-jc3f-c62g-v7qw",
        "discovery": "UNKNOWN"
      },
      "title": "Open Redirect in OpenCTI\u0027s SAML Authentication Flow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
    "assignerShortName": "GitHub_M",
    "cveId": "CVE-2025-61782",
    "datePublished": "2026-01-07T17:28:53.599Z",
    "dateReserved": "2025-09-30T19:43:49.902Z",
    "dateUpdated": "2026-01-07T18:12:58.971Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

PYSEC-2026-2264

Vulnerability from pysec - Published: 2026-01-07 18:15 - Updated: 2026-07-13 05:51

Details

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.

Severity

6.1 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Impacted products

Name	purl
pycti	pkg:pypi/pycti

Aliases

JSON

To clipboard

{
  "affected": [
    {
      "ecosystem_specific": {},
      "package": {
        "ecosystem": "PyPI",
        "name": "pycti",
        "purl": "pkg:pypi/pycti"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.8.3"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ],
      "versions": [
        "1.2.1",
        "1.2.11",
        "1.2.12",
        "1.2.13",
        "1.2.14",
        "1.2.15",
        "1.2.2",
        "1.2.4",
        "1.2.9",
        "2.0.0",
        "2.0.1",
        "2.0.2",
        "2.0.3",
        "2.1.10",
        "2.1.11",
        "2.1.12",
        "2.1.13",
        "2.1.3",
        "2.1.4",
        "2.1.5",
        "2.1.6",
        "2.1.7",
        "2.1.8",
        "2.1.9",
        "3.0.0",
        "3.0.1",
        "3.0.2",
        "3.0.3",
        "3.1.0",
        "3.1.1",
        "3.1.2",
        "3.2.0",
        "3.2.1",
        "3.2.2",
        "3.2.3",
        "3.2.4",
        "3.2.5",
        "3.2.6",
        "3.2.7",
        "3.3.0",
        "3.3.1",
        "3.3.2",
        "3.3.3",
        "4.0.0",
        "4.0.1",
        "4.0.2",
        "4.0.3",
        "4.0.4",
        "4.0.5",
        "4.0.6",
        "4.0.7",
        "4.1.0",
        "4.1.1",
        "4.1.2",
        "4.2.1",
        "4.2.2",
        "4.2.3",
        "4.2.4",
        "4.3.0",
        "4.3.1",
        "4.3.2",
        "4.3.3",
        "4.3.4",
        "4.3.5",
        "4.4.0",
        "4.4.1",
        "4.4.2",
        "4.4.3",
        "4.5.0",
        "4.5.1",
        "4.5.2",
        "4.5.3",
        "4.5.4",
        "4.5.5",
        "5.0.0",
        "5.0.1",
        "5.0.2",
        "5.0.3",
        "5.1.0",
        "5.1.1",
        "5.1.2",
        "5.1.3",
        "5.1.4",
        "5.10.0",
        "5.10.1",
        "5.10.2",
        "5.10.3",
        "5.11.0",
        "5.11.1",
        "5.11.10",
        "5.11.11",
        "5.11.12",
        "5.11.13",
        "5.11.14",
        "5.11.2",
        "5.11.3",
        "5.11.4",
        "5.11.5",
        "5.11.6",
        "5.11.7",
        "5.11.8",
        "5.11.9",
        "5.12.0",
        "5.12.1",
        "5.12.10",
        "5.12.11",
        "5.12.12",
        "5.12.13",
        "5.12.14",
        "5.12.15",
        "5.12.16",
        "5.12.17",
        "5.12.18",
        "5.12.19",
        "5.12.2",
        "5.12.20",
        "5.12.21",
        "5.12.22",
        "5.12.23",
        "5.12.24",
        "5.12.25",
        "5.12.26",
        "5.12.27",
        "5.12.28",
        "5.12.29",
        "5.12.3",
        "5.12.30",
        "5.12.31",
        "5.12.32",
        "5.12.33",
        "5.12.4",
        "5.12.5",
        "5.12.6",
        "5.12.7",
        "5.12.8",
        "5.12.9",
        "5.2.0",
        "5.2.1",
        "5.2.2",
        "5.2.3",
        "5.2.4",
        "5.3.0",
        "5.3.1",
        "5.3.10",
        "5.3.11",
        "5.3.12",
        "5.3.13",
        "5.3.14",
        "5.3.15",
        "5.3.16",
        "5.3.17",
        "5.3.2",
        "5.3.3",
        "5.3.4",
        "5.3.5",
        "5.3.6",
        "5.3.7",
        "5.3.8",
        "5.3.9",
        "5.3.post5310",
        "5.3.post5311",
        "5.3.post5312",
        "5.3.post5314",
        "5.3.post5315",
        "5.3.post5316",
        "5.3.post5317",
        "5.3.post5318",
        "5.4.0",
        "5.4.1",
        "5.5.0",
        "5.5.1",
        "5.5.2",
        "5.5.3",
        "5.5.4",
        "5.5.5",
        "5.5.6",
        "5.5.post551",
        "5.5.post552",
        "5.5.post553",
        "5.5.post554",
        "5.5.post555",
        "5.5.post556",
        "5.6.0",
        "5.6.1",
        "5.6.2",
        "5.6.post560",
        "5.6.post561",
        "5.6.post562",
        "5.7.0",
        "5.7.1",
        "5.7.2",
        "5.7.3",
        "5.7.4",
        "5.7.5",
        "5.7.6",
        "5.7.post570",
        "5.7.post571",
        "5.7.post572",
        "5.7.post573",
        "5.7.post574",
        "5.7.post575",
        "5.7.post576",
        "5.8.0",
        "5.8.1",
        "5.8.2",
        "5.8.3",
        "5.8.4",
        "5.8.5",
        "5.8.6",
        "5.8.7",
        "5.9.0",
        "5.9.1",
        "5.9.2",
        "5.9.3",
        "5.9.4",
        "5.9.5",
        "5.9.6",
        "6.0.0",
        "6.0.1",
        "6.0.10",
        "6.0.2",
        "6.0.3",
        "6.0.4",
        "6.0.5",
        "6.0.6",
        "6.0.7",
        "6.0.8",
        "6.0.9",
        "6.1.0",
        "6.1.1",
        "6.1.10",
        "6.1.11",
        "6.1.12",
        "6.1.13",
        "6.1.2",
        "6.1.3",
        "6.1.4",
        "6.1.5",
        "6.1.6",
        "6.1.7",
        "6.1.8",
        "6.1.9",
        "6.2.0",
        "6.2.1",
        "6.2.10",
        "6.2.11",
        "6.2.12",
        "6.2.13",
        "6.2.14",
        "6.2.15",
        "6.2.16",
        "6.2.17",
        "6.2.18",
        "6.2.19",
        "6.2.2",
        "6.2.3",
        "6.2.4",
        "6.2.5",
        "6.2.6",
        "6.2.7",
        "6.2.8",
        "6.2.9",
        "6.3.0",
        "6.3.1",
        "6.3.10",
        "6.3.11",
        "6.3.12",
        "6.3.13",
        "6.3.14",
        "6.3.2",
        "6.3.3",
        "6.3.4",
        "6.3.5",
        "6.3.6",
        "6.3.7",
        "6.3.8",
        "6.3.9",
        "6.4.0",
        "6.4.1",
        "6.4.10",
        "6.4.11",
        "6.4.2",
        "6.4.3",
        "6.4.4",
        "6.4.5",
        "6.4.6",
        "6.4.7",
        "6.4.8",
        "6.4.9",
        "6.5.0",
        "6.5.1",
        "6.5.10",
        "6.5.11",
        "6.5.2",
        "6.5.3",
        "6.5.4",
        "6.5.5",
        "6.5.6",
        "6.5.7",
        "6.5.8",
        "6.5.9",
        "6.6.0",
        "6.6.1",
        "6.6.10",
        "6.6.11",
        "6.6.12",
        "6.6.13",
        "6.6.14",
        "6.6.15",
        "6.6.16",
        "6.6.17",
        "6.6.18",
        "6.6.2",
        "6.6.3",
        "6.6.4",
        "6.6.5",
        "6.6.6",
        "6.6.7",
        "6.6.8",
        "6.6.9",
        "6.7.0",
        "6.7.1",
        "6.7.10",
        "6.7.11",
        "6.7.12",
        "6.7.13",
        "6.7.14",
        "6.7.15",
        "6.7.16",
        "6.7.17",
        "6.7.18",
        "6.7.19",
        "6.7.2",
        "6.7.20",
        "6.7.3",
        "6.7.4",
        "6.7.5",
        "6.7.6",
        "6.7.7",
        "6.7.8",
        "6.7.9",
        "6.8.0",
        "6.8.1",
        "6.8.2"
      ]
    }
  ],
  "aliases": [
    "CVE-2025-61782",
    "GHSA-jc3f-c62g-v7qw"
  ],
  "details": "OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform\u0027s SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.",
  "id": "PYSEC-2026-2264",
  "modified": "2026-07-13T05:51:02.096479Z",
  "published": "2026-01-07T18:15:51.223Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://github.com/OpenCTI-Platform/opencti/releases/tag/6.8.3"
    },
    {
      "type": "ADVISORY",
      "url": "https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-jc3f-c62g-v7qw"
    },
    {
      "type": "FIX",
      "url": "https://github.com/OpenCTI-Platform/opencti/commit/f755165a26888925c4a58018f7238ff92a0bd378"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ]
}

Find a vulnerability

Search criteria

Related vulnerabilities

CVE-2025-61782 (GCVE-0-2025-61782)

PYSEC-2026-2264