PT-2026-52907 · Undefined · Undefined

Publicado 2026-06-26 · Atualizado 2026-06-26 · CVE-2026-47193

NVD

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1, the journal diff endpoint discloses hidden historical field values without enforcing object and field visibility. This vulnerability is fixed in 17.3.3 and 17.4.1.

Correção

Information Disclosure

Missing Authorization

Enumeração de Fraquezas

CWE-200

CWE-862

Identificadores relacionados

CVE-2026-47193

Produtos afetados

Undefined

Referências · 2

• https://github.com/opf/openproject/security/advisories/GHSA-f2rx-x2qj-2hgj · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-47193 · Nota de Segurança