Skip to content
OpenAdvisories

Vendor

Plane

4 known vulnerabilities.

Products

Plane 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2023-30791

    Plane 0.7.1 - Insecure file upload

    Plane version 0.7.1-dev allows an attacker to change the avatar of his profile, which allows uploading files with HTML extension that interprets both HTML and JavaScript.

    Plane Plane
  • High 7.1
    CVE-2023-2268

    Plane v0.7.1 - Unauthorized access to files

    Plane version 0.7.1 allows an unauthenticated attacker to view all stored server files of all users.

    Plane Plane