Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2026-111869

makeplane API Endpoint reliance on untrusted inputs in a security decision

Description

A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

makeplane plane

  • 1.4.0affected
  • 1.4.1affected
  • 1.4.2affected

References