Skip to content
OpenAdvisories

Archive

15 July 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • High 7.1

    Plane 0.7.1 - Insecure file upload

    Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.

  • High 7.1

    Plane v0.7.1 - Unauthorized access to files

    Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.