Servers and applications
CVE-2023-33960
OpenProject is web-based project management software. For any OpenProject installation, a `robots.txt` file is generated through the server to denote which routes shall or shall not be accessed by crawlers. These routes contain project identifiers of all public projects in the instance. Prior to version 12.5.6, even if the entire instance is marked as `Login required` and prevents all truly…
- Severity
- High 7.5
- Published
- 1 Jun 2023
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 12.5.6
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
OpenProjectServers and applications · cpe:a:openproject:openproject |
|