CVE-2026-102988: CWE-943: Improper Neutralization of Special Elements in Data Query Logic in makeplane plane
Description
Plane, an open-source project management tool, has a vulnerability in versions prior to 1.4.0 where unauthenticated endpoints improperly handle the user-controlled order_by parameter. This allows attackers to traverse relationships in database queries, potentially revealing schema details and some field values. The issue is fixed in version 1.4.0.
CVSS v3.1
Score 5.3medium
Affected software
makeplane
plane
Run on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-102988 describes an improper neutralization of special elements in data query logic (CWE-943) in Plane before version 1.4.0. Multiple issue-listing endpoints, including unauthenticated public deploy boards, pass the user-controlled order_by parameter to Django's order_by function without allowlist validation. This enables attackers to use double-underscore relationship traversal to reference arbitrary related model fields, which can reveal database schema details through error messages and potentially disclose field values via differential ordering. The vulnerability is addressed in Plane version 1.4.0.
Potential Impact
An attacker can exploit this vulnerability to gain insights into the database schema and potentially disclose some field values without authentication. This information disclosure can aid further attacks but does not directly allow modification or denial of service. The CVSS score of 5.3 reflects a medium severity impact with confidentiality loss but no integrity or availability impact.
Mitigation Recommendations
This vulnerability is fixed in Plane version 1.4.0. Users should upgrade to version 1.4.0 or later to remediate this issue. No additional mitigation is required once the update is applied.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- GitHub_M
- Date Reserved
- 2026-09-29T20:46:08.334Z
- Cvss Version
- 3.1
- State
- PUBLISHED
Threat ID: 6ace52f62cdf04f65680e4f4
Added to database: 10/13/2026, 15:49:10 UTC
Last enriched: 10/13/2026, 16:04:12 UTC
Last updated: 10/13/2026, 18:57:33 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.