All vulnerabilities

Servers and applications

CVE-2023-33960

OpenProject is web-based project management software. For any OpenProject installation, a `robots.txt` file is generated through the server to denote which routes shall or shall not be accessed by crawlers. These routes contain project identifiers of all public projects in the instance. Prior to version 12.5.6, even if the entire instance is marked as `Login required` and prevents all truly…

Severity
High 7.5
Published
1 Jun 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
12.5.6
Sources
NVD

Affected software

SoftwareAffected versions
OpenProjectServers and applications · cpe:a:openproject:openproject
  • Every version before 12.5.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-33960
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-33960