CVE-2025-13871: Objectplanet Opinio

High severity, CVSS 8.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Cross-Site Request Forgery (CSRF) in the resource-management feature of ObjectPlanet Opinio 7.26 rev12562 allows to upload files on behalf of the connected users and then access such files without authentication.

Affected products

• Objectplanet Opinio: version 7.26 only

Published 2025-12-02. Last modified 2026-09-26.