CVE-2020-37044
1 advisory.
PyPI/pycti CVE-2020-37044: medium 6.1
OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can inject arbitrary JavaScript code by sending a crafted GET request with a malicio
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.3.1 |
Fixed versions
No fixed version in the source.
Sources
- osv: PYSEC-2026-115
- https://www.opencti.io/
- https://www.vulncheck.com/advisories/opencti-cross-site-scripting
- https://github.com/OpenCTI-Platform/opencti
- https://www.exploit-db.com/exploits/48595
CVE-2020-37044 · published · modified · JSON