OpenCTI GraphQL Mutation Improperly Allows Deletion of Sensitive Entities

A vulnerability exists in OpenCTI versions prior to 6.9.1, where the GraphQL mutation 'IndividualDeletionDeleteMutation' can be misused to delete unrelated and sensitive objects, such as analysis reports. This issue arises from a lack of validation in the API, allowing for the deletion of entities that are not contextually related to the mutation. The vulnerability is categorized as having a moderate severity, with a CVSS score of 6.5.

Impact

Exploitation of this vulnerability allows for the unauthorized deletion of sensitive entities, including analysis reports, incident response cases, and threat actor records.

Remediation

Users can upgrade to OpenCTI version 6.9.1 or later to address this vulnerability.