PT-2025-47593
CVE-2025-62293
·
Published
2025-11-20
·
Updated
2025-11-24
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
SOPlanning versions prior to 1.55
Description
SOPlanning is susceptible to a Broken Access Control issue in the
/status endpoint. Insufficient permission checks within the Project Status functionality allow an authenticated attacker to modify any status by adding, editing, or deleting entries. The vulnerable parameter is not specified.Recommendations
Update to version 1.55 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾