ObjectPlanet vulnerabilities
We track 3 vulnerabilities in ObjectPlanet products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on December 2, 2025.
Latest ObjectPlanet vulnerabilities
- 9.1 Critical severity
Opinio: Server-Side Request Forgery
Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests to an arbitrary destination.
- 8.8 High severity
Opinio: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connected users and then access such files without authentication.
- 9.8 Critical severity
Opinio: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Objectplanet Opinio version 7.22 and prior uses a cryptographically weak pseudo-random number generator (PRNG) coupled to a predictable seed, which could lead to an unauthenticated account takeover of any user on the application.