# CVE-2020-37044: PYSEC-2026-115 - OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql…

Source: https://junglewise.ai/threats/cve-2020-37044-pysec-2026-115-opencti-3-3-1-is-vulnerable-to-a-reflected-cross  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-30  
License: CC BY 4.0 with a link back

CVE-2020-37044 · Severity: low · CVSS 3.1 · Published 2026-01-30

OpenCTI 3.3.1 is vulnerable to a reflected cross-site scripting (XSS) attack via the /graphql endpoint. An attacker can inject arbitrary JavaScript code by sending a crafted GET request with a malicious payload in the query string, leading to execution of JavaScript in the victim's browser. For example, a request to /graphql?'"--></style></scRipt><scRipt>alert('Raif_Berkay')</scRipt> will trigger an alert. This vulnerability was discovered by Raif Berkay Dincel and confirmed on Linux Mint and Windows 10.

Technologies: [pycti (PyPI)](https://junglewise.ai/threats/technologies/pycti). Vendors: [PyPI](https://junglewise.ai/threats/vendors/pypi).

## Quick answers

**Is CVE-2020-37044 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2020-37044 being exploited in the wild.

**How severe is CVE-2020-37044?** Low severity, with a CVSS score of 3.1, published 30 January 2026.

**Which products and versions are affected?** pycti (PyPI) ECOSYSTEM:introduced=0,last_affected=3.3.1.

**Is there a fix for CVE-2020-37044?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2020-37044?** Check whether you run pycti (PyPI) at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- pycti (PyPI) ECOSYSTEM:introduced=0,last_affected=3.3.1

## Identifiers

- CVE-2020-37044
- PYSEC-2026-115

## Related threats

- [Filigran OpenCTI Code Injection in GraphQL API](https://junglewise.ai/threats/cve-2026-35211-filigran-opencti-code-injection-in-graphql-api)
- [Filigran OpenCTI authorization bypass via synchronized-upsert header](https://junglewise.ai/threats/cve-2026-35210-filigran-opencti-authorization-bypass-via-synchronized-upsert)
- [OpenCTI SSRF in Data Ingestion Feature](https://junglewise.ai/threats/cve-2026-21887-opencti-ssrf-in-data-ingestion-feature)
- [OpenCTI GraphQL introspection restriction bypass](https://junglewise.ai/threats/cve-2024-37155-opencti-graphql-introspection-restriction-bypass)
- [OpenCTI XSS in email-message observable body rendering](https://junglewise.ai/threats/cve-2026-35212-opencti-xss-in-email-message-observable-body-rendering)