CVE-2020-13963

creationtimestamp| type| source ---|---|--- 2021-03-21 23:36:05+00:00| seen| https://t.me/cibsecurity/25217 2026-08-27 12:19:27+00:00| seen| https://gist.github.com/momenbasel/b291d38d428104862f2cb1870dce321c...

CVE-2020-13963

SOPlanning before 1.47 contains an authentication bypass due to incorrect access control: the admin key is hardcoded in the installation code and there is no key for the guest account (publicsp). This allows bypassing administrator and guest authentication by forging a valid cookie. Vulnerable ve...