9.3 High
AI Score
Confidence
High
0.009 Low
EPSS
Percentile
82.8%
Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
www.pancakeapp.com/blog/entry/pancake-4.13.29-released
www.vaadata.com/blog/hardcoded-secret-leads-to-account-takeover/