{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/vendors/openproject/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["OpenProject"],"_cs_severities":["medium"],"_cs_tags":["information-disclosure","web-application"],"_cs_type":"advisory","_cs_vendors":["OpenProject"],"content_html":"\u003cp\u003eA vulnerability in OpenProject allows a remote, authenticated attacker to disclose sensitive information. The specific nature of the vulnerability and affected versions were not disclosed in the initial advisory. Users are encouraged to monitor for vendor updates regarding this information disclosure flaw.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eInventory all instances of OpenProject across the organization.\u003c/li\u003e\n\u003cli\u003eMonitor the official OpenProject security advisories for patch releases and version-specific impact details.\u003c/li\u003e\n\u003cli\u003eRestrict access to OpenProject instances to trusted users, as the vulnerability requires authentication.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-23T15:03:23Z","date_published":"2026-10-23T15:03:23Z","id":"https://feed.craftedsignal.io/briefs/2026-10-openproject-infoleak/","summary":"A remote, authenticated attacker can exploit a vulnerability in OpenProject to disclose sensitive information.","title":"OpenProject: Information disclosure vulnerability","url":"https://feed.craftedsignal.io/briefs/2026-10-openproject-infoleak/"}],"language":"en","title":"CraftedSignal Threat Feed - OpenProject","version":"https://jsonfeed.org/version/1.1"}