Advisories · Technology
ObjectPlanet Opinio.
Every CVE that names ObjectPlanet Opinio among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.8 Medium
The feature to import a survey is prone to stored Cross-Site Script attacks
- ObjectPlanet Opinio
- Cross-site scripting (XSS)
- CVSS 2.1 Low
Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio
- ObjectPlanet Opinio
- Server-side request forgery (SSRF)
- CVSS 2.3 Low
The feature to manage resources is prone to Cross-Site Request Forgery attacks
- ObjectPlanet Opinio
- Cross-site request forgery (CSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Cryptographically weak PRNG in Opinio 7.22
- Objectplanet Opinio
- CWE-335