CVE-2025-61782CWE-601

CVE-2025-61782

Medium · published January 7, 2026

CVSS v3.1
5.4
EPSS
0%
Percentile
16.3
In the wild
Unconfirmed
What it is

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00256 · 16.3th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2026-01-07T23:15Z
Affected products (1)
ProductVersionsFixed in
citeum/opencti< 6.8.36.8.3
References (3)
https://github.com/OpenCTI-Platform/opencti/releases/tag/6.8.3 · [email protected]https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-jc3f-c62g-v7qw · [email protected]https://github.com/OpenCTI-Platform/opencti/commit/f755165a26888925c4a58018f7238ff92a0bd378 · [email protected]
EPSS history
Timeline
  • 07 JAN 17:28Z
    Open Redirect in OpenCTI's SAML Authentication Flow
    cvelistv5