Advisories · Technology

plane.

Every CVE that names plane among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2024-47830 CVE record

CVSS 9.3 CriticalCritical · CVSS 9+

Plane allows server side request forgery via /_next/image endpoint
- plane
- Server-side request forgery (SSRF)
Not analysed yet 11 Oct 2024
CVE-2024-31461 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Plane Server-Side Request Forgery (SSRF) Vulnerability
- plane
- Server-side request forgery (SSRF)
Not analysed yet 10 Apr 2024
CVE-2023-30791 CVE record

CVSS 7.1 High

Plane 0.7.1 - Insecure file upload
- Plane
- Unrestricted file upload
Not analysed yet 15 Jul 2023
CVE-2023-2268 CVE record

CVSS 7.1 High

Plane v0.7.1 - Unauthorized access to files
- Plane
- Broken access control
Not analysed yet 15 Jul 2023