Description

OpenCTI is an open source platform for managing cyber threat intelligence knowledge and observables. Prior to version 6.8.3, an open redirect vulnerability exists in the OpenCTI platform's SAML authentication endpoint (/auth/saml/callback). By manipulating the RelayState parameter, an attacker can force the server to issue a 302 redirect to any external URL, enabling phishing, credential theft, and arbitrary site redirection. This issue has been patched in version 6.8.3.

INFO

Published Date :

2026-01-07T17:28:53.599Z

Last Modified :

2026-01-07T18:12:58.971Z

Source :

GitHub_M
AFFECTED PRODUCTS

The following products are affected by CVE-2025-61782 vulnerability.

Vendors Products
Opencti-platform
  • Opencti
REFERENCES

Here, you will find a curated list of external links that provide in-depth information to CVE-2025-61782.

URL Resource
https://github.com/OpenCTI-Platform/opencti/commit/f755165a26888925c4a58018f7238ff92a0bd378 cve-icon cve-icon
https://github.com/OpenCTI-Platform/opencti/releases/tag/6.8.3 cve-icon cve-icon
https://github.com/OpenCTI-Platform/opencti/security/advisories/GHSA-jc3f-c62g-v7qw cve-icon cve-icon
Login to claim this CVE

CVSS Vulnerability Scoring System

Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact