3 matches found
EUVD-2024-55742
A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project...
8.7CVSS5.9AI score
SaveExploits0References1
CVE-2026-40549
SOPlanning is vulnerable to Cross‑Site Request Forgery (CSRF) in the groupe_save create, modify, and delete endpoints. An attacker could induce an authenticated user to issue forged GET or POST requests via a malicious site. Affected version: 1.55 and below. The CVSS metrics indicate low to moder...
5.1CVSS5.8AI score0.00182EPSS
SaveExploits0References2
20