CVE-2024-26139 — OpenCTI Authenticated Privilege Escalation
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the pr…
Published: 2024-05-23 · CVSS: 8.3 · CVSS 3.1
OpenCTI is an open source platform allowing organizations to manage their cyber threat intelligence knowledge and observables. Due to lack of certain security controls on the profile edit functionality, an authenticated attacker with low privileges can gain administrative privileges on the web application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7