CVE-2025-13872 — Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio

CVE-2025-13872

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio PUBLISHED

Description (CNA)

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests to an arbitrary destination.

Affected (CNA)

Vendor / product	Versions
ObjectPlanet / Opinio	affected 7.26 rev12562

CWE

CWE-918

References

https://www.objectplanet.com/opinio/changelog.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.