Vendor
A remote, authenticated attacker can exploit a vulnerability in OpenProject to disclose sensitive information.