openpanel.

OpenPanel before 3.0.0 Credential Disclosure via notification.rules Query

• openpanel
• Information disclosure

OpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocket

• openpanel
• SQL injection

OpenPanel before 3.0.0 Missing Authentication on Worker Bull Board

• openpanel
• Authentication bypass

OpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.ts

• openpanel
• CWE-116

OpenPanel before 3.0.0 Sensitive Information Exposure via Application Logs

• openpanel
• Information disclosure

OpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.ts

• openpanel
• SQL injection

OpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filter

• openpanel
• SQL injection

OpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript Template

• openpanel
• Code injection

OpenPanel before 3.0.0 Missing Authorization via reference.getChartReferences

• openpanel
• Broken access control

OpenPanel before 3.0.0 Missing Authorization in event.bots tRPC Procedure

• openpanel
• Broken access control

OpenPanel before 3.0.0 ClickHouse SQL Injection via profile.values

• openpanel
• SQL injection

OpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC Query

• openpanel
• SQL injection

OpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC Mutation

• openpanel
• Privilege escalation

OpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.list

• openpanel
• Information disclosure

OpenPanel through 2.3.0 CSV Formula Injection via Cohort Member Export

• openpanel
• Other injection

OpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCE

• openpanel
• Code injection

OpenPanel API through 2.3.0 Authentication Bypass via Unverified Client Secret

• openpanel
• Authentication bypass

OpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key Filter

• openpanel
• SQL injection

OpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged Plaintext

• openpanel
• Information disclosure

OpenPanel through 2.3.0 Unauthenticated Share Lookup Information Disclosure

• openpanel
• Information disclosure

OpenPanel through 2.3.0 SSRF via Unguarded Importer File URL Fetch

• openpanel
• Server-side request forgery (SSRF)

OpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via Mutations

• openpanel
• Privilege escalation

OpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifier

• openpanel
• SQL injection

Openpanel before 2.3.0 Cross-Tenant IDOR via report.getLayouts

• openpanel
• Broken access control

OpenPanel API before 2.3.0 Unauthenticated SSRF via site-checker

• openpanel
• Server-side request forgery (SSRF)

OpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon Proxy

• openpanel
• Cross-site scripting (XSS)

OpenPanel before 2.3.0 SSRF via favicon and og endpoints

• openpanel
• Server-side request forgery (SSRF)

OpenPanel before 2.3.0 Cross-Tenant BOLA via report procedures

• openpanel
• Broken access control

OpenPanel before 2.3.0 Remote Code Execution via chart formulas

• openpanel
• Code injection

Openpanel before 2.3.0 SSRF via Site Checker Endpoint

• openpanel
• Server-side request forgery (SSRF)

OpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization Boundaries

• openpanel
• Broken access control

OpenPanel report.get Returns Any Report by Identifier Without Checking Project Access

• openpanel
• Broken access control