Security readout for executives and security teams
Plain-English summary
OpenCTI 3.3.1 can let an unauthenticated internet user read files from the server through a path traversal flaw. The main business risk is exposure of sensitive local files, credentials, or configuration data. Public exploit information exists, but the provided sources do not show active exploitation.
Executive priority
Treat as high priority for any exposed OpenCTI 3.3.1 deployment. The issue can disclose server files without login, and public exploit information exists. Prioritize inventory, exposure reduction, and vendor-supported remediation.
Technical view
CVE-2020-37041 is a CWE-22 directory traversal issue in OpenCTI 3.3.1 via the static/css endpoint. CVSS 3.1 is 7.5: network exploitable, low complexity, no privileges, no user interaction, with high confidentiality impact and no stated integrity or availability impact.
Likely exposure
Organizations running OpenCTI 3.3.1 are the stated affected population. Risk is highest where the OpenCTI web interface is reachable from untrusted networks. The provided sources do not identify other affected versions or a fixed version.
Exploitation context
ExploitDB and VulnCheck document the vulnerability, so public exploit details exist. The source bundle marks CISA KEV as false, and no cited source states active exploitation in the wild.
Researcher notes
Evidence is limited to OpenCTI 3.3.1. Sources confirm arbitrary file read through directory traversal and report testing on Linux Mint and Windows 10. No source in the bundle names a patched version, official advisory, or active exploitation.
Mitigation direction
- Identify any OpenCTI 3.3.1 deployments, especially internet-facing instances.
- Check OpenCTI vendor/GitHub guidance for a fixed release or official remediation.
- Restrict OpenCTI access to trusted networks until remediation is confirmed.
- Monitor web requests for path traversal indicators targeting static assets.
- Review local sensitive files and application secrets if exposure is suspected.
Validation and detection
- Confirm the installed OpenCTI version from asset inventory or deployment records.
- Verify whether OpenCTI is reachable from the internet or untrusted networks.
- Review web server logs for traversal-style requests to static/css paths.
- Check vendor release notes or repository history for remediation information.
- Document whether compensating access controls are enforced in front of OpenCTI.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-22: File access and web shell behavior lookup
File traversal and upload weaknesses can lead teams to review file, web shell, execution, and collection telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupFile access behavior lookup
The CVE wording references file access or upload behavior, so file telemetry and web shell review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2020-37041 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- High
- CVSS
- 7.5 (3.1)
- Known Exploited
- No
- Published
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N3.93.6Primary CVE scoreVulnerability scoring details
Base CVSS 3.1 score
7.5HighVector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Source materials
- CVE List V5 sourceCVE List V5
- ExploitDB-48595CVE reference · exploit
- OpenCTI Official HomepageCVE reference · product
- OpenCTI GitHub RepositoryCVE reference · product
- VulnCheck Advisory: OpenCTI 3.3.1 - Directory TraversalCVE reference · third-party-advisory
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.