Blind Server-Side Request Forgery (SSRF) in the survey-import feature of
ObjectPlanet Opinio 7.26 rev12562 on
Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests
to an arbitrary destination.
| Software | From | Fixed in |
|---|---|---|
| objectplanet / opinio | 7.26 | 7.26.x |