Skip to content
OpenAdvisories

Vendor

Plane

4 known vulnerabilities.

Products

Plane 4
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2026-15342

    CVE-2026-15342

    Plane contains a multi‑tenant authorization flaw in its asset‑management API that allows authenticated users from one workspace to access, delete, or duplicate assets belonging to another workspace by providing only the victim workspace slug and asset ID. The…

    Plane Plane
  • Medium 6.9
    CVE-2026-10850

    Plane 1.3.1 - Stored XSS in intake issue description_html

    Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when creating an intake work item through the API v1 intake endpoint.

    Plane Plane