Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
OpenCTI-Platform/opencti
master @ 421a1cb
142
Fixes
0
CVEs
CRITICAL
Peak severity
Highlights
Auth Bypass: 100 prior fixes. Scrutinize any change in this area.
opencti-graphql: most-fixed (31 issues). Treat as high-risk during review.
82 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: The platform relies on complex, multi-tenant organization segregation and group membership checks. Flaws in these logic helpers systematically expose sensitive STIX elements, streams, and collection data across tenant boundaries.
Sandbox Escape: Server-side EJS template compilation has been repeatedly bypassed by attackers hiding arbitrary payload expressions within JS comments or leveraging shorthand properties to escape the AST syntax validation.
Auth Bypass: Mishandling stateless authentication headers inside active express sessions, along with flawed logic in identifying user sessions during impersonation or group updates, led to severe authorization and session-fixation risks.