CVE-2026-27723

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-27723", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-02-23T18:37:14.789Z", "datePublished": "2026-03-05T16:26:39.752Z", "dateUpdated": "2026-03-06T16:11:41.415Z"}, "containers": {"cna": {"title": "OpenProject: Insufficient access control leads to create Wiki objects belongs unpermitted projects", "problemTypes": [{"descriptions": [{"cweId": "CWE-284", "lang": "en", "description": "CWE-284: Improper Access Control", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/opf/openproject/security/advisories/GHSA-9gc6-3xjq-pwc9", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/opf/openproject/security/advisories/GHSA-9gc6-3xjq-pwc9"}, {"name": "https://github.com/opf/openproject/releases/tag/v17.0.5", "tags": ["x_refsource_MISC"], "url": "https://github.com/opf/openproject/releases/tag/v17.0.5"}, {"name": "https://github.com/opf/openproject/releases/tag/v17.1.2", "tags": ["x_refsource_MISC"], "url": "https://github.com/opf/openproject/releases/tag/v17.1.2"}], "affected": [{"vendor": "opf", "product": "openproject", "versions": [{"version": "< 17.0.5", "status": "affected"}, {"version": "< 17.1.2", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-05T16:26:39.752Z"}, "descriptions": [{"lang": "en", "value": "OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2."}], "source": {"advisory": "GHSA-9gc6-3xjq-pwc9", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-06T15:50:53.924245Z", "id": "CVE-2026-27723", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T16:11:41.415Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-27723", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-06T15:50:53.924245Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-06T15:50:54.960Z"}}], "cna": {"title": "OpenProject: Insufficient access control leads to create Wiki objects belongs unpermitted projects", "source": {"advisory": "GHSA-9gc6-3xjq-pwc9", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}}], "affected": [{"vendor": "opf", "product": "openproject", "versions": [{"status": "affected", "version": "< 17.0.5"}, {"status": "affected", "version": "< 17.1.2"}]}], "references": [{"url": "https://github.com/opf/openproject/security/advisories/GHSA-9gc6-3xjq-pwc9", "name": "https://github.com/opf/openproject/security/advisories/GHSA-9gc6-3xjq-pwc9", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/opf/openproject/releases/tag/v17.0.5", "name": "https://github.com/opf/openproject/releases/tag/v17.0.5", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/opf/openproject/releases/tag/v17.1.2", "name": "https://github.com/opf/openproject/releases/tag/v17.1.2", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284: Improper Access Control"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-05T16:26:39.752Z"}}}, "cveMetadata": {"cveId": "CVE-2026-27723", "state": "PUBLISHED", "dateUpdated": "2026-03-06T16:11:41.415Z", "dateReserved": "2026-02-23T18:37:14.789Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-05T16:26:39.752Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "openproject", "vendor": "opf", "versions": [{"status": "affected", "version": "< 17.0.5"}, {"status": "affected", "version": "< 17.1.2"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*", "matchCriteriaId": "9F0A8442-0E13-46ED-8123-1E19A94A47D6", "versionEndExcluding": "17.0.5", "vulnerable": true}, {"criteria": "cpe:2.3:a:openproject:openproject:*:*:*:*:*:*:*:*", "matchCriteriaId": "02E31D6F-C404-4FAC-B21F-E477E2314A8D", "versionEndExcluding": "17.1.2", "versionStartIncluding": "17.1.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "OpenProject is an open-source, web-based project management software. Prior to versions 17.0.5 and 17.1.2, an attacker can create wiki pages belonging to unpermitted projects through an improperly authenticated request. This issue has been patched in versions 17.0.5 and 17.1.2."}, {"lang": "es", "value": "OpenProject es un software de gesti\u00f3n de proyectos de c\u00f3digo abierto basado en la web. Antes de las versiones 17.0.5 y 17.1.2, un atacante puede crear p\u00e1ginas wiki pertenecientes a proyectos no autorizados a trav\u00e9s de una solicitud con autenticaci\u00f3n incorrecta. Este problema ha sido parcheado en las versiones 17.0.5 y 17.1.2."}], "id": "CVE-2026-27723", "lastModified": "2026-06-17T10:27:33.710", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-27723", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-06T15:50:53.924245Z", "version": "2.0.3"}}]}, "published": "2026-03-05T19:16:05.660", "references": [{"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/opf/openproject/releases/tag/v17.0.5"}, {"source": "security-advisories@github.com", "tags": ["Product", "Release Notes"], "url": "https://github.com/opf/openproject/releases/tag/v17.1.2"}, {"source": "security-advisories@github.com", "tags": ["Vendor Advisory"], "url": "https://github.com/opf/openproject/security/advisories/GHSA-9gc6-3xjq-pwc9"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "security-advisories@github.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,17.0.5)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,17.1.2)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "openproject", "source": "cna", "vendor": "opf"}, "product": "openproject", "vendor": "opf"}], "analysis": {"en": {"generated_at": "2026-04-16T12:18:19.495992+00:00", "value": {"mitigation_remediation": ["Upgrade OpenProject to version 17.0.5 or later if running 17.0.x, or to version 17.1.2 or later if on the 17.1.x branch to apply the vendor patch that fixes the access control flaw.", "If upgrading is not immediately possible, restrict user permissions so that only authorized project members can access the wiki creation endpoint and monitor logs for unauthorized write attempts.", "Review and tighten role definitions and project access settings to ensure that users cannot create or modify wiki content in projects beyond their scope of work."], "summary": {"action": "Apply Patch", "impact": "Privilege Escalation / Unauthorized Content Creation"}, "threat_synthesis": {"affected_systems": "The issue exists in OpenProject releases prior to 17.0.5 and 17.1.2. Any deployment using those earlier versions and not yet patched is susceptible. The vulnerability was publicly disclosed through the OpenProject releases and security advisory channels.", "description_and_impact": "An insufficient access control flaw in OpenProject allows an authenticated user to create wiki pages that belong to projects they are not permitted to access. This flaw does not provide remote code execution or data exfiltration, but it enables an attacker to add, modify, or delete content in any project where they normally have no write authority. Such unauthorized creation can be used to deface, inject misleading information, or ship content that may later be linked to malicious campaigns. The vulnerability is characterized by CWEs that denote an authorization weakness in application logic.", "risk_and_exploitability": "The CVSS score of 4.3 indicates medium severity. The EPSS of <1% suggests a low likelihood of widespread exploitation at this time. The vulnerability is not listed in CISA\u2019s KEV catalog. The attack requires an authenticated session and the ability to craft a web request targeting the wiki creation endpoint; the vector is likely remote via standard HTTP(S) traffic. The low exploitation probability reflects the need for an access token and the scarcity of public exploitation evidence."}}}}, "created": "2026-03-06T15:01:36.478563+00:00", "updated": "2026-04-16T12:30:06.110522+00:00", "vendors": ["opf", "opf$PRODUCT$openproject"]}