opal vulnerabilities

2 known vulnerabilities in opal from Obiba. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.7 High severity

  opal: Cross-Site Request Forgery

  CVE-2025-27792Mar 11, 2025Obiba

  Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, the protections against cross-site request forgery (CSRF) were insufficient application-wide. The referrer header is checked, and if it is invalid, the s

• 7.3 High severity

  opal: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-27101Mar 11, 2025Obiba

  Opal is OBiBa’s core database application for biobanks or epidemiological studies. Prior to version 5.1.1, when copying any parent directory to a folder in the /temp/ directory, all files in that parent directory are copied, including files which the user shou