Fixing 32 Arbitrary Code Execution On OpenCTI Project.

[DEMON1A]

📊 Metadata *

• Fixing Multiple ACE Issues On OpenCTI Due To Insecure YAML Processing.

Bounty URL: https://www.huntr.dev/bounties/1-other-lastinfosec

⚙️ Description *

• All OpenCTI 32 Scripts is Vulnerable To Arbitrary Code Execution Due To Insecure YAML Validation. See The Bounty URL For More Information.

💻 Technical Description *

• Due To Insecure Usage Of yaml.FullLoader Attackers Can Get Code Execution From OpenCTI Project Using a YAML File That Will Inject a Python Code Due To Insecure YAML Processing. In This Case I Fixed This Isssue By Using yaml.SafeLoader And It Was Really Painful To Edit All Of These 32 Modules.

🐛 Proof of Concept (PoC) *

• Check The Bounty URL For Valid Proof Of Concept

🔗 Relates to...

• Arbitary code execution lastinfosec huntr#1919

[huntr-helper]

👋 Hello, @SamuelHassine - @DEMON1A has opened a PR to us with a fix for a potential vulnerability in your repository. To view the vulnerability, please refer to the bounty URL in the first comment, above.

Ultimately, you get to decide if the fix is 👍 or 👎. If you are happy with the fix, please write a new comment (@huntr-helper - LGTM) and we will open a PR to your repository with the fix. All remaining PRs for this vulnerability will be automatically closed.

If you have any questions or need support, come and join us on our community Discord!

@SamuelHassine & @DEMON1A - thank you for your efforts in securing the world’s open source code! 🎉

---

🔨 Want more security researchers protecting your repository?

Stick our badge on your README.md, and let security researchers know that they can win bounties protecting your repositories. Sounds cool, huh? 😎

Copy this small code snippet and insert it into your README.md:

[![huntr](https://cdn.huntr.dev/huntr_security_badge.svg)](https://huntr.dev)

👇 👇 👇