Vulnerabilities

TI-2025-19972 CVE-2025-27102

Agate vulnerable to HTML injection in user signup - Administrator phishing risk

HIGH 66

Agate is central authentication server software for OBiBa epidemiology applications.

CVSS 4.0MEDIUM 5.4 Network No auth User interaction EPSS 0.0047 Published 2025-03-17 Fixed in 3.3.0 CWE-79

TI-2025-20571 CVE-2025-27792

HIGH 73

Opal is OBiBa’s core database application for biobanks or epidemiological studies.

CVSS 4.0HIGH 7.7 Network No auth No interaction EPSS 0.00291 Published 2025-03-11 Fixed in 5.1.1 CWE-352

TI-2025-19971 CVE-2025-27101

HIGH 65

Opal is OBiBa’s core database application for biobanks or epidemiological studies.

CVSS 4.0HIGH 7.3 Network Low privileges No interaction EPSS 0.0058 Published 2025-03-11 Fixed in 5.1.1 CWE-22