Christian Studer

cti-transmute Saved Graph Configuration Allows Stored Cross-Site Scripting via svgIcon

cti-transmute Stored XSS via Crafted Tag Icon on Admin Triage Interface

cti-transmute Unauthenticated SSRF via Hostnames Resolving to Internal IP Addresses

Stored Cross-Site Scripting in CTI-Transmute Conversion Graph via Malicious STIX/MISP Content

cti-transmute Conversion History Authorization Bypass Leads to Sensitive Data Disclosure After Conversion Deletion

cti-transmute Following List Exposes User Email Addresses to Authenticated Users

Unauthenticated Stored Vue Template Injection Leads to Cross-Site Scripting in CTI-Transmute

Server-Side Request Forgery and Local File Disclosure in CTI-Transmute Evaluation PDF Rendering

Unauthenticated Denial of Service via Unbounded Activity-Timeline Range in CTI-Transmute

Cross-Site Request Forgery in the Administrative User Deletion Endpoint