CVE-2026-102988 | Makeplane Plane up to 1.3.x Issue List Endpoint order_queryset.py order_issue_queryset order_by information exposure

October 13, 2026 Yanac

A vulnerability was found in Makeplane Plane up to 1.3.x and classified as problematic. The affected element is the function order_issue_queryset of the file apps/api/plane/utils/order_queryset.py of the component Issue List Endpoint. Such manipulation of the argument order_by leads to information exposure through error message.

This vulnerability is traded as CVE-2026-102988. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More