CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-62293
Severity
MEDIUM
CVSS
5.4
EPSS
0.17%
Original NVD Description
SOPlanning is vulnerable to Broken Access Control in /status endpoint. Due to lack of permission checks in Project Status functionality an authenticated attacker is able to add, edit and delete any status. This issue was fixed in version 1.55.
Related CVEs
Other vulnerabilities affecting the same vendor(s)