CNNVD-202512-262 Information

CNNVD ID

CNNVD-202512-262

CVE-2025-13871

  • CNNVD Published: 2025-12-02

Description (Chinese)

ObjectPlanet Opinio是挪威ObjectPlanet公司的一个在线调查系统。 ObjectPlanet Opinio 7.26 rev12562版本存在安全漏洞,该漏洞源于资源管理功能存在跨站请求伪造,可能导致上传文件并无需认证访问。

Description (English)

ObjectPlanet Opinio is an online investigation system of ObjectPlant, Norway. There is a security loophole in the version 7.26 rev12562 of ObjectivePlanet Opinio, which stems from the existence of a cross-site request for forgery of the resource management function, which may lead to the uploading of documents without the need for authentication access.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

ObjectPlanet

Published

2025-12-02

Last Modified

2026-02-24

References

https://www.objectplanet.com/opinio/changelog.html

Patch

https://www.objectplanet.com/

Share on: