Vulnerabilidades em Openpanel-dev

32 resultados
Análise Vexday

Openpanel-dev apresenta 13 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando produto em fase de divulgação intensiva de riscos. Apesar de uma vulnerabilidade crítica, nenhuma está sob exploração ativa no momento. A fraqueza dominante (CWE-639 - Autorização em escopo errado) sugere falhas estruturais em controle de acesso que exigem atenção prioritária.

CVE-2026-85610HIGHOpenPanel before 2.3.0 Remote Code Execution via chart formulasEPSS 0.7%CVE-2026-93985CRITICALOpenPanel js-runtime through 2.3.0 JavaScript Template Sandbox Escape RCEEPSS 0.7%CVE-2026-116817MEDIUMOpenPanel before 3.0.0 Missing Authentication on Worker Bull BoardEPSS 0.6%CVE-2026-85609MEDIUMOpenpanel before 2.3.0 SSRF via Site Checker EndpointEPSS 0.5%CVE-2026-116811HIGHOpenPanel before 3.0.0 Sandbox Escape RCE via Webhook JavaScript TemplateEPSS 0.5%CVE-2026-88893HIGHOpenPanel through 2.3.0 Unauthenticated Share Lookup Information DisclosureEPSS 0.5%CVE-2026-88891HIGHOpenPanel through 2.3.0 Read-Only Access Level Enforcement Bypass via MutationsEPSS 0.4%CVE-2026-116818HIGHOpenPanel before 3.0.0 Unauthenticated ClickHouse SQL Injection via /live/visitors WebSocketEPSS 0.4%CVE-2026-93984MEDIUMOpenPanel API through 2.3.0 Authentication Bypass via Unverified Client SecretEPSS 0.4%CVE-2026-77768HIGHOpenPanel report.get Returns Any Report by Identifier Without Checking Project AccessEPSS 0.4%CVE-2026-77769HIGHOpenPanel report.list Queries Reports by an Unverified dashboardId, Crossing Organization BoundariesEPSS 0.4%CVE-2026-85612HIGHOpenPanel before 2.3.0 SSRF via favicon and og endpointsEPSS 0.4%CVE-2026-85613HIGHOpenPanel before 2.3.0 Unauthenticated XSS via SVG Favicon ProxyEPSS 0.4%CVE-2026-88890HIGHOpenPanel through 2.3.0 SQL Injection via unvalidated profile filter column identifierEPSS 0.4%CVE-2026-116808HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via profile.valuesEPSS 0.4%CVE-2026-93983MEDIUMOpenPanel through 2.3.0 SQL Injection via ClickHouse Property Key FilterEPSS 0.3%CVE-2026-88892MEDIUMOpenPanel through 2.3.0 SSRF via Unguarded Importer File URL FetchEPSS 0.3%CVE-2026-116819HIGHOpenPanel before 3.0.0 Credential Disclosure via notification.rules QueryEPSS 0.3%CVE-2026-116814HIGHOpenPanel before 3.0.0 Sensitive Information Exposure via Application LogsEPSS 0.3%CVE-2026-116807HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via event.events tRPC QueryEPSS 0.3%