Summary
Ein entfernter Angreifer kann mehrere Schwachstellen in OpenProject ausnutzen, um Sicherheitsmaßnahmen zu umgehen, unbefugten Zugriff auf Benutzerkonten zu erlangen, Daten zu manipulieren oder zu löschen oder Informationen auszulesen.
Product
OpenProject ist ein quelloffenes, webbasiertes Projektmanagementsystem, das klassische, agile und hybride Projektmethoden unterstützt.
Vulnerabilities 1
-
Low 3.5
OpenProject is Vulnerable to User Enumeration via User ID
OpenProject is an open-source, web-based project management software. Prior to version 16.6.2, a low‑privileged logged-in user can view the full names of other users. Since user IDs are assigned sequentially and predictably (e.g., 1 to 1000), an attacker can …
Revision history
-
#1
Initiale Fassung
References
-
OpenProject Release 17.9.7 vom 2026-11-10
https://github.com/opf/openproject/releases/tag/v17.9.7
-
GitHub Security Advisory GHSA-773c-7fc3-342g vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-773c-7fc3-342g
-
GitHub Security Advisory GHSA-g75c-9rjg-8cvj vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-g75c-9rjg-8cvj
-
GitHub Security Advisory GHSA-pggp-67cq-xgrg vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-pggp-67cq-xgrg
-
GitHub Security Advisory GHSA-pv79-v2hf-5gg8 vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-pv79-v2hf-5gg8
-
GitHub Security Advisory GHSA-q9gv-q2h3-7g3x vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-q9gv-q2h3-7g3x
-
GitHub Security Advisory GHSA-rhcj-h663-7v7w vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-rhcj-h663-7v7w
-
GitHub Security Advisory GHSA-vjqq-p9g9-42wx vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-vjqq-p9g9-42wx
-
GitHub Security Advisory GHSA-vpg6-crgp-fc2h vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-vpg6-crgp-fc2h
-
GitHub Security Advisory GHSA-x252-j3fp-j593 vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-x252-j3fp-j593
-
GitHub Security Advisory GHSA-xpmj-x5hg-hq6j vom 2026-11-10
https://github.com/opf/openproject/security/advisories/GHSA-xpmj-x5hg-hq6j