Obiba vulnerabilities
We track 2 vulnerabilities in Obiba products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 11, 2025.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Obiba vulnerabilities
- 7.7 High severity
opal: Cross-Site Request Forgery
Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protections against cross-site request forgery (CSRF) were insufficient application-wide. The referrer header is checked, and if it is invalid, the s
- 7.3 High severity
opal: Improper Limitation of a Pathname to a Restricted Directory
Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user shou