CVE-2025-13872

概要

参考情報

• objectplanet.com/opinio/changelog.html · Release Notes

opinio のその他の脆弱性

• CVE-2025-13873中 5.4Stored Cross-Site Scripting (XSS) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on web application allows an attacker to…
• CVE-2025-13871高 8.8Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on beh…
• CVE-2023-4472緊急 9.8Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed…
• CVE-2020-26806高 8.8admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution…
• CVE-2020-26565高 7.5ObjectPlanet Opinio before 7.14 allows Expression Language Injection via the admin/permissionList.do from parameter. This can be used to ret…