PT-2025-47593 · Unknown · Soplanning

Łukasz Jaworski · Published 2025-11-20 · Updated 2025-11-24 · CVE-2025-62293

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SOPlanning versions prior to 1.55

Description SOPlanning is susceptible to a Broken Access Control issue in the /status endpoint. Insufficient permission checks within the Project Status functionality allow an authenticated attacker to modify any status by adding, editing, or deleting entries. The vulnerable parameter is not specified.

Recommendations Update to version 1.55 or later.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-62293

Affected Products

Soplanning

References · 14

• https://nvd.nist.gov/vuln/detail/CVE-2025-62293 · Security Note
• https://osv.dev/vulnerability/CVE-2025-62293 · Vendor Advisory
• https://t.me/cveNotify/143776 · Telegram Post
• https://t.me/cveNotify/143775 · Telegram Post
• https://t.me/cveNotify/143774 · Telegram Post
• https://t.me/cveNotify/143779 · Telegram Post
• https://t.me/cveNotify/143777 · Telegram Post
• https://t.me/cveNotify/143778 · Telegram Post
• https://soplanning.org/en · Note
• https://twitter.com/CVEnew/status/1991535335701184741 · Twitter Post
• https://t.me/cveNotify/143780 · Telegram Post
• https://t.me/CVEtracker/37834 · Telegram Post
• https://t.me/cveNotify/143781 · Telegram Post
• https://cert.pl/en/posts/2025/11/CVE-2025-62293 · Note