Skip to content
OpenAdvisories

Vendor

obiba

3 known vulnerabilities.

Products

opal 2 agate 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.4
    CVE-2025-27102

    Agate vulnerable to HTML injection in user signup - Administrator phishing risk

    Agate is central authentication server software for OBiBa epidemiology applications. Prior to version 3.3.0, when registering for an Agate account, arbitrary HTML code can be injected into a user's first and last name. This HTML is then rendered in the email …

    obiba agate