Open Redirect Risk in OpenCTI Platform's SAML Authentication Endpoint

CVE-2025-61782

What is CVE-2025-61782?

The OpenCTI platform has a vulnerability in its SAML authentication callback endpoint, where the RelayState parameter can be manipulated. This leads to an open redirect issue that allows attackers to redirect users to malicious external URLs. Such exploitation can facilitate phishing attacks and compromise user credentials. The vulnerability has been resolved in version 6.8.3, and users are urged to upgrade to this version or later to mitigate risks.

References