CVE-2025-62294

7.5HIGH

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and

게시됨: 11/20/2025업데이트됨: 11/24/2025
NVD에서 보기MITRE에서 보기

설명

SOPlanning is vulnerable to Predictable Generation of Password Recovery Token. Due to weak mechanism of generating recovery tokens, a malicious attacker is able to brute-force all possible values and takeover any account in reasonable amount of time. This issue was fixed in version 1.55.

AI 분석AI 기반

영향받는 제품

soplanningsoplanning

참조