14 matches found
CVE-2026-111869
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...
CVE-2026-111869 makeplane API Endpoint reliance on untrusted inputs in a security decision
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...
EUVD-2026-103380
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...
CVE-2026-111869 makeplane API Endpoint reliance on untrusted inputs in a security decision
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...
CVE-2026-111869
A vulnerability exists in makeplane plane (up to version 1.4.2) affecting an unknown function within the API Endpoint component. The flaw stems from reliance on untrusted inputs in a security decision when processing the X-Forwarded-For argument. This issue allows for a remote attack vector. Whil...
CVE-2026-111869: Reliance on Untrusted Inputs in a Security Decision
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit i...
EUVD-2025-24583
Malicious code in bioql PyPI...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
CVE-2025-50251
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
CVE-2025-50251
The makeplane plane open-source project planning tool is affected by a Server-Side Request Forgery (SSRF) vulnerability in version 0.23.1 . The flaw exists within the password recovery functionality, allowing an attacker to potentially force the server to make unintended requests. The vulnerabili...
CVE-2025-50251: Server-Side Request Forgery (SSRF)
Server side request forgery SSRF vulnerability in makeplane plane 0.23.1 via the password recovery...
PT-2025-33008 · Makeplane · Makeplane
Name of the Vulnerable Software and Affected Versions: makeplane plane version 0.23.1 Description: The software contains a server side request forgery SSRF vulnerability in the password recovery functionality. Recommendations: At the moment, there is no information about a newer version that...