CVE-2024-27113

Name of the Vulnerable Software and Affected Versions SO Planning tool versions prior to 1.52.02

Description An unauthenticated Insecure Direct Object Reference (IDOR) to the database has been found in the SO Planning tool that occurs when the public view setting is enabled. An attacker could use this issue to gain access to the underlying database by exporting it as a CSV file.

Recommendations For versions prior to 1.52.02, update to version 1.52.02 to resolve the issue. As a temporary workaround, consider disabling the public view setting until the update is applied. Restrict access to the database export functionality to minimize the risk of exploitation.