Skip to content

Invalid date / time values can be added using a python program and pycti module #10881

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Aspidoquelona opened this issue Apr 30, 2025 · 0 comments · May be fixed by #10984
Open

Invalid date / time values can be added using a python program and pycti module #10881

Aspidoquelona opened this issue Apr 30, 2025 · 0 comments · May be fixed by #10984
Assignees
Labels
bug use for describing something not working as expected
Milestone

Comments

@Aspidoquelona
Copy link

Description

We can set invalid date/time values using pycti module in a python program, but then we cannot read or modify this value because an error is raised when accessing it

Environment

  1. OS: Ubuntu 22.04 LTS
  2. OpenCTI version: 6.6.6
  3. OpenCTI client: python

Reproducible Steps

  1. Execute this code:
# 5ad3865a-abd0-4f51-b4b4-e8a12a8481dd is the id of an existing intrusion_set

api_client.stix_domain_object.update_field(
    id="5ad3865a-abd0-4f51-b4b4-e8a12a8481dd", input={"key": "first_seen", "value": "2025-04-30"}
)
  1. Everything seems ok, BUT
  2. If we open this url in a browser
https://opencti-cti.gfor.ses-op/dashboard/threats/intrusion_sets/5ad3865a-abd0-4f51-b4b4-e8a12a8481dd

the following error appears:

(!) An unknown error occurred. Please provide a [support package](https://opencti-cti.gfor.ses-op/dashboard/settings/support) to your administrator or OpenCTI maintainers

Expected Output

I expect that "stix_domain_object.update_field" function does not allow to set bad date / time values or that internal checks within openCTI code do not allow to assign invalid date / time values

Actual Output

An invalid date/ time value is stored and an error occurs when trying to read this wrong value

Additional information

Screenshots (optional)

@Aspidoquelona Aspidoquelona added bug use for describing something not working as expected needs triage use to identify issue needing triage from Filigran Product team labels Apr 30, 2025
@nino-filigran nino-filigran removed the needs triage use to identify issue needing triage from Filigran Product team label May 9, 2025
@aHenryJard aHenryJard added this to the Bugs backlog milestone May 9, 2025
@JeremyCloarec JeremyCloarec self-assigned this May 13, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug use for describing something not working as expected
Projects
None yet
4 participants