Citeum OpenCTI 3.3.1
Approved changes feed: RSS · Atom
cpe:2.3:a:citeum:opencti:3.3.1:*:*:*:*:*:*:*part: a version: 3.3.1 update: *
| Vendor | Citeum (6f4d24fd-ce85-5a24-8d7a-515474cac7ae) |
|---|---|
| Product | Opencti (1c2c8e0f-e164-5422-a867-3b115de8f4e9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/leondaz/opencti |
purl2cpe | 2026-06-01 10:17:58.099043 |
pkg:github/opencti-platform/opencti |
purl2cpe | 2026-06-01 10:17:58.099044 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-37044 |
vulnerable | 2026-06-08 05:25:50.056953 |
OpenCTI 3.3.1 - Cross Site Scripting
MEDIUM (5.4)
OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can inject arbitrary JavaScript code by sending a crafted GET request with a malicious payload in the query string, leading to execution of JavaScript in the victim's browser. For example, a request to /graphql?'"--></style></scRipt><scRipt>alert('Raif_Berkay')</scRipt> will trigger an alert. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.
Published: 2026-01-30T22:07:16.561Z
Updated: 2026-03-05T01:27:39.756Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-37041 |
vulnerable | 2026-06-08 05:25:50.053829 |
OpenCTI 3.3.1 - Directory Traversal
HIGH (7.5)
OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences (e.g., '../') in the URL. For example, requesting /static/css//../../../../../../../../etc/passwd returns the contents of /etc/passwd. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.
Published: 2026-01-30T22:07:15.297Z
Updated: 2026-03-05T01:27:37.387Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.