[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"cve-CVE-2025-24892":3},{"id":4,"cve_id":5,"euvd_id":6,"summary":7,"published":8,"cvss_data":9,"is_remote":20,"cwes":21,"cpes":23,"technologies":246,"references":248,"score":253,"epss_score":254,"epss_percentile":255,"is_kev":256,"cisa_kev_date_added":257,"cisa_kev_due_date":257,"cisa_ssvc":258,"attack_mappings":268,"exploits":275},83662,"CVE-2025-24892","EUVD-2025-3977","OpenProject is open-source, web-based project management software. In versions prior to 15.2.1, the application fails to properly sanitize user input before displaying it in the Group Management section. Groups created with HTML script tags are not properly escaped before rendering them in a project. The issue has been resolved in OpenProject version 15.2.1. Those who are unable to upgrade may apply the patch manually.","2025-02-10T16:15:00Z",{"cvss_v3.1":10},{"scope":11,"version":12,"baseScore":13,"attackVector":14,"baseSeverity":15,"vectorString":16,"integrityImpact":17,"userInteraction":18,"attackComplexity":17,"availabilityImpact":19,"privilegesRequired":17,"confidentialityImpact":17},"CHANGED","3.1",5.4,"NETWORK","MEDIUM","CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N","LOW","REQUIRED","NONE",true,[22],"CWE-79",[24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240,241,242,243,244,245],"cpe:2.3:a:openproject:openproject:12.3.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:9.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.1.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.14:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.2.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.9:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.10:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.5.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.2.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.2.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.3.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.13:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.5.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.17:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.2.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.2.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.4.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.10:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.1.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.2.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.17:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.3.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.1.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.1.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.3.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.20:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.6.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.11:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.4.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:9.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.1.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.1.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.11:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.4.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.12:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.12:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.6.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.1.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.11:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.3.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.6.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.2.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.6.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.4.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.4.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.3.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.4.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.3.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.3.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.15:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.0.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.3.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.1.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.1.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.3.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:-:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.3.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.6.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.16:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.3.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.18:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.4.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.5.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.9:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.3.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.4.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.1.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.4.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.4.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.2.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.19:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.3.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.2.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:6.1.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.0.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.4.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.10:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:14.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:9.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.1.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.3.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.3.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.4.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.6.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.2.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:9.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.2.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.12:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.16:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.4.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.6:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:8.2.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:3.0.15:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.7:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.0:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.1.2:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.5:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:11.2.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:13.0.4:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.13:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.0.3:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:4.0.9:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:10.0.1:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.8:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:12.0.9:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:5.0.14:*:*:*:*:*:*:*","cpe:2.3:a:openproject:openproject:7.4.5:*:*:*:*:*:*:*",[247],"Openproject Openproject",[249,250,251,252],"https:\u002F\u002Fgithub.com\u002Fopf\u002Fopenproject\u002Fpull\u002F17783","https:\u002F\u002Fgithub.com\u002Fopf\u002Fopenproject\u002Fsecurity\u002Fadvisories\u002FGHSA-mg4q-ghvh-cm2j","https:\u002F\u002Fpatch-diff.githubusercontent.com\u002Fraw\u002Fopf\u002Fopenproject\u002Fpull\u002F17783.patch","https:\u002F\u002Fwww.openproject.org\u002Fdocs\u002Frelease-notes\u002F12-5-1",0.47,0.00295,0.21907,false,null,{"timestamp":259,"automatable":260,"tech_impact":261,"exploitation":262,"cisa_decision":263,"cisa_remediation_timeline":267},"2025-02-10T16:19:47.009601Z","no","partial","none",{"vector":264,"decision":265,"priority":266},"CISAv1\u002FE:N\u002FA:N\u002FT:P\u002FM:H\u002F2026-10-25T18:44:34.627104\u002F","track_star","medium","60D",[269],{"name":270,"source":271,"tactics":272,"technique_id":274},"Exploit Public-Facing Application","attack_vector",[273],"initial-access","T1190",[]]