Plane
11 known vulnerabilities
Top Products
Plane CE 1.3.1 allows a low-privileged project member to submit arbitrary HTML/JS in the description_html field when cre
Plane is an open-source project management tool. Prior to version 1.3.1, there is a cross-workspace asset authorization
Plane is an open-source project management tool. In versions 1.3.0 and below, SavedAnalyticEndpoint passes the user-cont
Plane is an an open-source project management tool. From 0.28.0 to before 1.3.0, the remediation of GHSA-jcc6-f9v6-f7jw
Plane is an an open-source project management tool. Prior to 1.3.0, a vulnerability was identified in Plane's authentica
Plane is an an open-source project management tool. Prior to 1.3.0, the IssueBulkUpdateDateEndpoint allows a project mem
Plane is an an open-source project management tool. Prior to version 1.2.2, unauthenticated attackers can enumerate work
Plane is an an open-source project management tool. Prior to version 1.2.3, the webhook URL validation in plane/app/seri
Plane is an an open-source project management tool. Prior to version 1.2.2, a Full Read Server-Side Request Forgery (SSR
Plane is an an open-source project management tool. Prior to version 1.2.2, the `ProjectAssetEndpoint.patch()` method in
Plane is an an open-source project management tool. In plane.io, a guest user doesn't have a permission to access https[
Frequently Asked Questions
How many CVEs affect Plane?
Plane has 11 CVE records in our database, including 0 critical and 5 high severity vulnerabilities.
What are the most severe Plane vulnerabilities?
Plane has 0 critical severity (CVSS 9.0+) and 5 high severity (CVSS 7.0-8.9) vulnerabilities. Review the list above sorted by publication date to find the most recent high-severity issues.
How can I scan for Plane vulnerabilities?
CyberStrike's AI-powered security agents automatically detect vulnerabilities in Plane products across your infrastructure. The platform provides continuous pentesting, DAST scanning, and real-time vulnerability monitoring with actionable remediation guidance.
Detect Plane Vulnerabilities
CyberStrike scans your infrastructure for Plane vulnerabilities and provides real-time remediation guidance.
Get Started