← Database

CVE-2025-13872

CRITICAL CVSS: 9.1 Published: 2025-12-02 Modified: 2026-06-17

Description

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests to an arbitrary destination.

Affected Platforms

Objectplanet Opinio

Weakness Type

CWE-918

References