CVE-2020-25867

2020-10-0720:55:32

mitre

www.cve.org

soplanning

security key

bypass

vulnerability

authentication

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

47.4%

JSON

SoPlanning before 1.47 doesn’t correctly check the security key used to publicly share plannings. It allows a bypass to get access without authentication.

References

github.com/thomasfady/CVE-2020-25867