Vulnerabilidades em Openpanel-dev

32 resultados
Análise Vexday

Openpanel-dev apresenta 13 vulnerabilidades catalogadas, todas publicadas nos últimos 90 dias, indicando produto em fase de divulgação intensiva de riscos. Apesar de uma vulnerabilidade crítica, nenhuma está sob exploração ativa no momento. A fraqueza dominante (CWE-639 - Autorização em escopo errado) sugere falhas estruturais em controle de acesso que exigem atenção prioritária.

CVE-2026-85614CRITICALOpenPanel API before 2.3.0 Unauthenticated SSRF via site-checkerEPSS 0.3%CVE-2026-116810MEDIUMOpenPanel before 3.0.0 Missing Authorization via reference.getChartReferencesEPSS 0.3%CVE-2026-85611MEDIUMOpenPanel before 2.3.0 Cross-Tenant BOLA via report proceduresEPSS 0.2%CVE-2026-85615MEDIUMOpenpanel before 2.3.0 Cross-Tenant IDOR via report.getLayoutsEPSS 0.2%CVE-2026-116806MEDIUMOpenPanel before 3.0.0 Privilege Escalation via onboarding.project tRPC MutationEPSS 0.2%CVE-2026-116813HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via conversion.service.tsEPSS 0.2%CVE-2026-116812HIGHOpenPanel before 3.0.0 ClickHouse SQL Injection via cohort.preview profile filterEPSS 0.2%CVE-2026-116815MEDIUMOpenPanel before 3.0.0 Improper ClickHouse Escaping in sankey.service.tsEPSS 0.2%CVE-2026-116805MEDIUMOpenPanel before 3.0.0 Information Disclosure of Ingestion Secret Hashes via client.listEPSS 0.2%CVE-2026-116809MEDIUMOpenPanel before 3.0.0 Missing Authorization in event.bots tRPC ProcedureEPSS 0.2%CVE-2026-108579LOWOpenPanel through 2.3.0 CSV Formula Injection via Cohort Member ExportEPSS 0.2%CVE-2026-93982MEDIUMOpenPanel through 2.3.0 MCP Authentication Token in Query Parameter Logged PlaintextEPSS 0.2%