CVE-2025-13871

Cross-Site Request Forgery (CSRF) in the resource-management feature of

ObjectPlanet Opinio 7.26 rev12562

allows to upload
files on behalf of the connected users and then access such files without authentication.

More information : https://www.objectplanet.com/opinio/changelog.html