Cross-Site Request Forgery (CSRF) in the resource-management feature of
ObjectPlanet Opinio 7.26 rev12562
allows to upload files on behalf of the connected users and then access such files without authentication.
| Software | From | Fixed in |
|---|---|---|
| objectplanet / opinio | 7.26 | 7.26.x |