CVE-2020-13963

creationtimestamp| type| source ---|---|--- 2021-03-21 23:36:05+00:00| seen| https://t.me/cibsecurity/25217...

CVE-2020-13963

SOPlanning before 1.47 contains an authentication bypass due to incorrect access control: the admin key is hardcoded in the installation code and there is no key for the guest account (publicsp). This allows bypassing administrator and guest authentication by forging a valid cookie. Vulnerable ve...