ObjectPlanet Opinio Cross-Site Request Forgery Vulnerability

A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the resource management feature of ObjectPlanet Opinio version 7.26 prior to 7.27. This vulnerability allows an attacker to upload files on behalf of connected users and access those files without authentication.

Impact

Exploitation of this vulnerability could lead to unauthorized file uploads and access to those files, potentially allowing for further exploitation or information disclosure.

Remediation

Users are advised to update to ObjectPlanet Opinio version 7.27 or later, where this vulnerability has been addressed.