See how makeplane compares to other vendors in security performance
A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit is publicly available and might be used.
Server side request forgery (SSRF) vulnerability in makeplane plane 0.23.1 via the password recovery.
Plane v0.13-dev is vulnerable to authenticated blind server-side request forgery vulnerability.