opf openproject

• CVE-2026-55095 Medium 5.3 OpenProject: Inplace-edit dialog exposes comments from hidden admin-only project custom fields 0.4%
• CVE-2026-67529 Medium 4.3 OpenProject: Private work package subject/identity disclosure through the global Time Entries and Cost Entries APIs (linked work package rendered without visibility check) 0.4%
• CVE-2026-67528 Medium 4.3 OpenProject: Improper Access Control through /api/v3/custom_options/:id via Path "id" leads to Sensitive Data Exposure 0.4%
• CVE-2026-67527 High 7.6 OpenProject: Improper Access Control through /api/v3/work_packages/<X.id> via PATCH parameter "fileLinks" 0.4%
• CVE-2026-44733 Medium 5.9 OpenProject: Business Logic Error on OpenProject through PATCH request to /api/v3/users/me permits to bypass password requirements 0.3%
• CVE-2026-44731 Medium 4.3 OpenProject: Improper Access Control on OpenProject through /projects/[projectName]/meetings via "invited_user_id" in GET parameter "filters" leads to user names disclosure 0.3%
• CVE-2026-44732 Medium 4.3 OpenProject: IDOR on OpenProject through /api/v3/documents/{id} via PATCH parameter "project_id" leads to Unauthorized Modification of Resources 0.3%
• CVE-2026-44734 Medium 6.5 OpenProject: Improper Access Control on OpenProject through the POST request to /projects/[PROJECT_NAME]/cost_reports/[REPORT_ID]/rename 0.3%
• CVE-2026-44735 Medium 6.5 OpenProject: Shares API Information Disclosure 0.4%
• CVE-2026-44696 Medium 5.7 OpenProject: Stored CSS injection via Sanitize::Config::RELAXED[:css] enables phishing overlays and data exfiltration 0.3%
• CVE-2026-49355 Medium 4.3 OpenProject: Private work package data disclosure through single meeting agenda item API 0.3%
• CVE-2026-44736 Medium 6.5 OpenProject: Relations API Filter Bypasses Visibility Scope, Leaking Cross-Project Work Package Subjects 0.4%
• CVE-2026-46386 Critical 9.9 OpenProject: Pre-authentication RCE in openproject/openproject Docker image via default `SECRET_KEY_BASE=OVERWRITE_ME` and `cookies_serializer = :marshal` 0.5%
• CVE-2026-52780 Critical 9.6 OpenProject: Cache store poisoning leads to Remote Code Execution (RCE) 0.4%
• CVE-2026-52779 Medium 5.4 OpenProject: Cross-project authorization bypass allows deleting public Calendar and Team Planner queries from unauthorized projects 0.2%
• CVE-2026-47193 High 7.5 OpenProject: Journal diff endpoint bypasses object, journal, and field visibility checks 0.3%
• CVE-2026-52781 Medium 6.4 OpenProject: Stored XSS on openproject.example.com through /api/v3/projects/{project}/work_packages via POST parameter "description" 0.3%
• CVE-2026-52782 Critical 9.9 OpenProject: IDOR through /projects/<A>/settings/project_storages/<A_ps_id> via PATCH parameter "storages_project_storage[project_folder_id]" leads to Access to Unauthorized Resources 0.5%
• CVE-2026-52783 High 8.2 OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure 0.2%
• CVE-2026-52784 High 8.8 OpenProject: CSRF on TARGET through /users/:id via POST parameter "user[admin]" 0.2%
• CVE-2026-52785 Critical 9.9 OpenProject: SQL injection in timestamps functionality 0.4%
• CVE-2026-40896 Medium 6.5 OpenProject has Cross-Project Meeting Agenda Item Injection via Unscoped Section Lookup 0.2%
• CVE-2026-33667 High 7.4 OpenProject: 2FA OTP Verification Missing Rate Limiting 0.3%
• CVE-2026-34717 Critical 9.9 OpenProject: SQL Injection in Cost Reporting =n Operator via parse_number_string 0.3%
• CVE-2026-32703 Critical 9.1 OpenProject's repository files are served with the MIME type allowing them to be used to bypass Content Security Policy 0.2%
• CVE-2026-32698 Critical 9.1 OpenProject has a SQL Injection via Custom Field Name that can be chained to Remote Code Execution 0.3%
• CVE-2026-31974 Low 3.0 Blind SSRF on OpenProject instance via webhooks 0.2%
• CVE-2026-30239 Medium 6.5 OpenProject has a Permission Check bypass on Budget deletion allows reassignment of WorkPackages into other budgets 0.2%
• CVE-2026-30236 Medium 4.3 OpenProject users that are not project members can be used to calculate Labor Budget, leaking their global hourly rate 0.2%
• CVE-2026-30235 Medium 6.5 Business Logic Error on OpenProject through hyperlinks in markdown using DOM clobbering 0.4%
• CVE-2026-30234 Medium 6.5 OpenProject BIM BCF XML Import: <Snapshot> Path Traversal Leads to Arbitrary Local File Read (AFR) 0.4%
• CVE-2026-27723 Medium 4.3 OpenProject: Insufficient access control leads to create Wiki objects belongs unpermitted projects 0.2%
• CVE-2026-24777 Medium 6.7 OpenProject has Improper Access Control on User Management allows user managers to lock admin accounts 0.4%
• CVE-2026-25763 Critical 9.4 Command Injection on OpenProject repositories leads to Remote Code Execution 0.5%
• CVE-2026-25764 Low 3.5 OpenProject vulnerable to Stored HTML injection 0.3%
• CVE-2026-24776 Medium 4.3 OpenProject has an IDOR on MeetingAgendaItems allows cross-project meeting agenda item transfer 0.2%
• CVE-2026-24775 Medium 6.3 OpenProject has Forced Actions, Content Spoofing, and Persistent DoS via ID Manipulation in OpenProject Blocknote Editor Extension 0.1%
• CVE-2026-24772 High 8.9 OpenProject has SSRF and CSWSH in Hocuspocus Synchronization Server 0.2%
• CVE-2026-24685 Critical 9.4 OpenProject has Argument Injection on Repository module that allows Arbitrary File Write 0.4%
• CVE-2026-23721 Medium 4.3 OpenProject users with "View Members" permission in any project can view all Group memberships 0.2%
• CVE-2026-23646 Medium 6.5 OpenProject users can delete other user's session, causing them to be logged out 0.4%
• CVE-2026-23625 High 8.7 OpenProject has stored XSS regression using attachments and script-src self 0.2%
• CVE-2026-22605 Medium 4.3 OpenProject is Vulnerable to Insecure Direct Object Reference in Meetings 0.2%
• CVE-2026-22604 Medium 6.9 OpenProject is vulnerable to user enumeration via the change password function 0.3%
• CVE-2026-22603 Medium 6.9 OpenProject has no protection against brute-force attacks in the Change Password function 0.3%
• CVE-2026-22602 Low 3.5 OpenProject is Vulnerable to User Enumeration via User ID 0.3%
• CVE-2026-22601 High 8.6 OpenProject is Vulnerable to Code Execution in E-Mail function 0.4%
• CVE-2026-22600 Critical 9.1 OpenProject is Vulnerable to Arbitrary File Read via ImageMagick SVG Coder 0.3%
• CVE-2025-24892 Low 3.5 OpenProject stored HTML injection vulnerability 0.3%
• CVE-2024-41801 Medium 4.7 OpenProject packaged installation has Open Redirect Vulnerability in Sign-In in default configuration 0.3%