CVE-2025-62293 — Broken Access Control in SOPlanning

CVE-2025-62293

Broken Access Control in SOPlanning PUBLISHED

Description (CNA)

SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55.

Affected (CNA)

Vendor / product	Versions
SOPlanning / SOPlanning	affected 0 before 1.55

CWE

CWE-862

References

https://cert.pl/en/posts/2025/11/CVE-2025-62293
https://www.soplanning.org/en/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.