CVE-2026-52780: CVE-2026-52780: hatalı girdi doğrulama

Açıklama (NVD)

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, cache store poisoning leads to Remote Code Execution (RCE). This vulnerability is fixed in 17.3.3 and 17.4.1.

Özet bilgiler

CVSS v3.1

9.6 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS

%0,39 (yüzdelik 33)

CWE

CWE-20

Yama

Yok / bilinmiyor

Kaynaklar

• NVD kaydı
• github.com
• CWE-20