OpenCTI Directory Traversal Vulnerability

A directory traversal vulnerability has been identified in OpenCTI version 3.3.1. This vulnerability allows unauthenticated attackers to read arbitrary files from the filesystem by sending crafted GET requests with path traversal sequences in the URL. The issue was confirmed on Linux Mint and Windows 10.

Impact

Exploitation of this vulnerability allows for unauthorized access to sensitive files on the server, such as the passwd file, which can disclose user information and potentially lead to further exploitation.

Reproduction

To reproduce this vulnerability, send a GET request to the '/static/css' endpoint with path traversal sequences (e.g., '../') in the URL. The request will return the contents of the file specified in the traversal sequence.