Skip to content
OpenAdvisories

Vendor

ObjectPlanet

4 known vulnerabilities.

Products

Opinio 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2025-13872

    Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio

    Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests to an arbitrary destination.

    ObjectPlanet Opinio
  • Low 2.3
    CVE-2025-13871

    The feature to manage resources is prone to Cross-Site Request Forgery attacks

    Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connected users and then access such files without authentication.

    ObjectPlanet Opinio