{"id":"CVE-2026-111869","published":"2026-10-18T03:16:28.970","lastModified":"2026-10-18T03:16:30.107","description":"A vulnerability was identified in makeplane plane up to 1.4.2. Impacted is an unknown function of the component API Endpoint. Such manipulation of the argument X-Forwarded-For leads to reliance on untrusted inputs in a security decision. It is possible to launch the attack remotely. The exploit is publicly available and might be used.","cvssScore":5.3,"cvssSeverity":"MEDIUM","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","cwes":["CWE-20","CWE-807"],"vendors":[],"products":[],"references":[{"url":"https://github.com/makeplane/plane/","tags":[]},{"url":"https://github.com/makeplane/plane/issues/9913","tags":[]},{"url":"https://vuldb.com/cve/CVE-2026-111869","tags":[]},{"url":"https://vuldb.com/submit/1004923","tags":[]},{"url":"https://vuldb.com/submit/1005105","tags":[]},{"url":"https://vuldb.com/vuln/421581","tags":[]},{"url":"https://vuldb.com/vuln/421581/cti","tags":[]}],"exploitRefs":[{"url":"https://github.com/makeplane/plane/","tags":[]},{"url":"https://github.com/makeplane/plane/issues/9913","tags":[]}],"hasPoc":true,"ai":null}