📦 Plane

Plane project management tool versions before 1.2.2 contain a Full Read SSRF vulnerability in the 'Add Link' feature. Authenticated users can send arbitrary GET requests to internal networks and exfil...

CVE-2023-2268 is an information disclosure vulnerability in Plane version 0.7.1 that allows unauthenticated attackers to access all user files stored on the server. This affects any organization runni...

This vulnerability in Plane.io allows guest users to access an API endpoint that lists workspace members, potentially exposing admin email addresses through display_name fields. It affects all Plane.i...