Omnispace vulnerabilities
We track 16 vulnerabilities in Omnispace products. 16 are rated high or critical, and none are known to be exploited. The most recent was published on November 13, 2026.
Latest Omnispace vulnerabilities
- 7.5 High severity
Agora Project: Use of Insufficiently Random Values
Omnispace Agora Project through 26.10.0 contains a predictable token generation vulnerability that allows unauthenticated attackers to access private calendar data by exploiting a missing dateCrea value that causes the md5Id token to collapse to md5(calendarId
- 8.1 High severity
Agora Project: Cross-Site Request Forgery
Omnispace Agora Project through 26.10.0 contains a cross-site request forgery vulnerability that allows remote attackers to forge privileged actions such as administrator user creation by merging $_GET and $_POST parameters without requiring an anti-CSRF token
- 8.1 High severity
Agora Project: Missing Authorization
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a space administrator to assign users into spaces outside their authority because the spaceAffectList affectation was performed without verifying the caller's rig
- 7.1 High severity
Agora Project: Missing Authorization
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability that allows a regular, non-administrative member to create user accounts by invoking the user-edit action without a function-level authorization check. Attackers can exploit
- 8.1 High severity
Agora Project: Improper Neutralization of Special Elements used in an SQL Command
Omnispace Agora Project before 26.10.0 contains a SQL injection vulnerability in the calendar functionality that allows attackers to inject malicious SQL by manipulating the sortEvents parameter, which is concatenated into the ORDER BY clause without sanitizat
- 7.5 High severity
Agora Project: Authorization Bypass Through User-Controlled Key
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in the MobileFileDownload route that allows unauthenticated attackers to download arbitrary files by computing an md5(filename) token instead of passing a proper authorizatio
- 8.8 High severity
Agora Project: Improper Limitation of a Pathname to a Restricted Directory
Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can
- 8.8 High severity
Agora Project: Session Fixation
Omnispace Agora Project before 26.10.0 contains a session fixation vulnerability that allows remote attackers to hijack authenticated sessions by planting a known session identifier in a victim's browser prior to login. Attackers can exploit the application's
- 7.4 High severity
Agora Project: Insufficiently Protected Credentials
Omnispace Agora Project before 26.10.0 contains a vulnerability where the persistent remember-me token is stored verbatim server-side, making the stored value identical to the bearer credential held in the user's cookie. Attackers who gain access to the stored
- 7.4 High severity
Agora Project: Weak Password Recovery Mechanism for Forgotten Password
Omnispace Agora Project before 26.10.0 contains a predictable password-reset token vulnerability that allows unauthenticated attackers to take over user accounts by computing the reset token as sha1(login.password), a deterministic and reusable value. Attacker
- 7.4 High severity
Agora Project: Use of Password Hash Instead of Password for Authentication
Omnispace Agora Project before 26.10.0 contains an authentication bypass vulnerability that allows attackers possessing a user's stored bcrypt password hash to authenticate as that user without knowing the actual password, caused by the legacy AGORAP_LOG/AGORA
- 8.8 High severity
Agora Project: Improper Neutralization of Special Elements used in an SQL Command
Omnispace Agora Project before 26.10.0 contains a SQL identifier injection vulnerability that allows a space administrator to escalate privileges by supplying caller-controlled agoraFields[] names as unvalidated SQL column identifiers during the user import fl
- 8.1 High severity
Agora Project: Authorization Bypass Through User-Controlled Key
Omnispace Agora Project before 26.10.0 contains a broken access control vulnerability in setAffectations() that allows authenticated attackers to insert access-right records for a caller-supplied target space without verifying the caller has rights to that spa
- 8.1 High severity
Agora Project: Improper Neutralization of Special Elements used in an SQL Command
Omnispace Agora Project before 26.10.0 contains a second-order SQL injection vulnerability that allows authenticated attackers to inject malicious SQL via the _idCategoryFilter parameter, which is persisted into the session and later concatenated into a SQL st
- 7.4 High severity
Agora Project: Use of Insufficiently Random Values
Omnispace Agora Project before 26.10.0 contains an insecure randomness vulnerability that allows attackers to predict temporary or default account passwords generated by Txt::defaultPassword() using PHP's uniqid() function based on server time in microseconds.
- 9.8 Critical severity
Agora Project: Improper Control of Generation of Code
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile() and DbInstall::dbControl(), c