ObjectPlanet Opinio Server-Side Request Forgery Vulnerability in Survey Import Feature

A blind server-side request forgery (SSRF) vulnerability has been identified in ObjectPlanet Opinio version 7.26 prior to 7.27. This vulnerability allows an attacker to manipulate the survey-import feature on web-based platforms, forcing the server to send HTTP GET requests to arbitrary destinations. The issue arises from crafted import requests that exploit the survey-import functionality.

Impact

Exploitation of this vulnerability allows for blind server-side request forgery, where the server is tricked into making requests to internal or external resources on behalf of the attacker.

Remediation

Users are advised to update to ObjectPlanet Opinio version 7.27 or later, where this vulnerability has been addressed.