CVE-2025-13872 LOW

CVE-2025-13872: Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio

Vendor Objectplanet
Product Opinio
Weakness CWE-918 · SSRF
Published December 2, 2025
Last update December 2, 2025
View on NVD All CVEs

CVSS base score

2.1/10
Attack vector Network
Attack complexity High
Privileges required High
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:H/AT:P/PR:H/UI:N/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N

What the vulnerability does

01Description

Blind Server-Side Request Forgery (SSRF) in the survey-import feature of ObjectPlanet Opinio 7.26 rev12562 on Web-based platforms allows an attacker to force the server to perform HTTP GET requests via crafted import requests to an arbitrary destination.

Key dates

02Disclosure timeline

December 2, 2025 CVE published
December 2, 2025 Record updated