Security Advisory

Plane Security Update Advisory (CVE-2024-47830)

  • Oct 16 2024

Overview

 

An update has been released to address vulnerabilities in Plane. Users of the affected versions are advised to update to the latest version.

 

Affected Products

 

CVE-2024-47830

  • pLANE versions: ~ 0.22 (inclusive)

 

 

Resolved Vulnerabilities

 

Vulnerability in Plane due to wildcard support that could cause the server to send requests to unintended locations (CVE-2024-47830)

 

Vulnerability Patches

 

The following product-specific vulnerability patches have been made available with the latest update. If you are using an affected version, Please follow the instructions on the Referenced Sites to update to the latest Vulnerability Patches version.

 

CVE-2024-47830

  • pLANE version: 0.23

 

 

References

[1] CVE-2024-47830 Detail

https://nvd.nist.gov/vuln/detail/CVE-2024-47830

[2] Server side request forgery via /_next/image endpoint

https://github.com/makeplane/plane/security/advisories/GHSA-39gx-38xf-c348

Tags:

Previous Post

Next Post