Description
In OpenCTI through 5.2.4, a broken access control vulnerability has been identified in the profile endpoint. An attacker can abuse the identified vulnerability in order to arbitrarily change their registered e-mail address as well as their API key, even though such action is not possible through the interface, legitimately.
Mitigation
Minimal update. May introduce new vulnerabilities or breaking changes.
|
 pypi | | =1.2.1 || =1.2.11 || =1.2.12 || =1.2.13 || =1.2.14 || =1.2.15 || =1.2.2 || =1.2.4 || =1.2.9 || =2.0.0 || =2.0.1 || =2.0.2 || =2.0.3 || =2.1.10 || =2.1.11 || =2.1.12 || =2.1.13 || =2.1.3 || =2.1.4 || =2.1.5 || =2.1.6 || =2.1.7 || =2.1.8 || =2.1.9 || =3.0.0 || =3.0.1 || =3.0.2 || =3.0.3 || =3.1.0 || =3.1.1 || =3.1.2 || =3.2.0 || =3.2.1 || =3.2.2 || =3.2.3 || =3.2.4 || =3.2.5 || =3.2.6 || =3.2.7 || =3.3.0 || =3.3.1 || =3.3.2 || =3.3.3 || =4.0.0 || =4.0.1 || =4.0.2 || =4.0.3 || =4.0.4 || =4.0.5 || =4.0.6 || =4.0.7 || =4.1.0 || =4.1.1 || =4.1.2 || =4.2.1 || =4.2.2 || =4.2.3 || =4.2.4 || =4.3.0 || =4.3.1 || =4.3.2 || =4.3.3 || =4.3.4 || =4.3.5 || =4.4.0 || =4.4.1 || =4.4.2 || =4.4.3 || =4.5.0 || =4.5.1 || =4.5.2 || =4.5.3 || =4.5.4 || =4.5.5 || =5.0.0 || =5.0.1 || =5.0.2 || =5.0.3 || =5.1.0 || =5.1.1 || =5.1.2 || =5.1.3 || =5.1.4 || =5.2.0 || =5.2.1 || =5.2.2 || =5.2.3 || =5.2.4 || >=0 <5.3.0 | 5.3.0 |
