Low · 2.3 CVE-2025-13871 EUVD-2025-200217GHSA-wm7v-q4q9-gqfh

The feature to manage resources is prone to Cross-Site Request Forgery attacks

Published Dec 2, 2025 · Updated Dec 2, 2025 · Assigned by TCS-CERT

Description

Cross-Site Request Forgery (CSRF) in the resource-management feature of

ObjectPlanet Opinio 7.26 rev12562

allows to upload
files on behalf of the connected users and then access such files without authentication.

Vendor	Product	Affected	Fixed
ObjectPlanet	Opinio	7.26 rev12562	—