CVE-2025-13871

The feature to manage resources is prone to Cross-Site Request Forgery attacks PUBLISHED

Description (CNA)

Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connected users and then access such files without authentication.

Affected (CNA)

Vendor / product	Versions
ObjectPlanet / Opinio	affected 7.26 rev12562

CWE

CWE-352

References

https://www.objectplanet.com/opinio/changelog.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.