CVE-2020-37041
1 advisory.
PyPI/pycti CVE-2020-37041: high 7.5
OpenCTI 3.3.1 is vulnerable to a directory traversal attack via the static/css endpoint. An unauthenticated attacker can read arbitrary files from the filesystem by sending crafted GET requests with p
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-114
- https://www.opencti.io/
- https://www.vulncheck.com/advisories/opencti-directory-traversal
- https://github.com/OpenCTI-Platform/opencti
- https://www.exploit-db.com/exploits/48595
CVE-2020-37041 · published · modified · JSON