Skip to content
OpenAdvisories

Package · Azure Linux

opal

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.7
    CVE-2025-27792

    Opal vulnerable to CSRF protection bypass

    Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protections against cross-site request forgery (CSRF) were insufficient application-wide. The referrer header is checked, and if it is invalid, the …

    obiba opal opal Azure Linux
  • High 7.3
    CVE-2025-27101

    Broken Access Control in Opal filesystem's copy functionality exposes all user data

    Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user sho…

    obiba opal opal Azure Linux