CVE-2020-26565

概要

参考情報

• packetstormsecurity.com/files/163708/ObjectPlanet-Opinio-7.13-Expression-Language-Injection.html · Exploit
• objectplanet.com/opinio/changelog.html · Release Notes

opinio のその他の脆弱性

• CVE-2025-13873中 5.4Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to…
• CVE-2025-13872緊急 9.1Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allow…
• CVE-2025-13871高 8.8Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on beh…
• CVE-2023-4472緊急 9.8Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed…
• CVE-2020-26806高 8.8admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution…