Skip to content
OpenAdvisories
Low · 2.1 CVE-2025-13872 EUVD-2025-200216GHSA-8hh6-8639-p8vq

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio

Published Dec 2, 2025 · Updated Dec 2, 2025 · Assigned by TCS-CERT

Vendor: ObjectPlanet Product: Opinio

Description

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of

ObjectPlanet Opinio 7.26 rev12562 on

Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests

to an arbitrary destination.

Affected products

VendorProductAffectedFixed
ObjectPlanet Opinio 7.26 rev12562 —

References