Privilege Escalation in SOPlanning by Vendor SOPlanning

CVE-2025-62730

What is CVE-2025-62730?

SOPlanning suffers from a privilege escalation vulnerability within its user management tab. Authenticated users assigned the 'user_manage_team' role can improperly modify user permissions, allowing them to grant administrative access to themselves or other users. This security flaw, which can be exploited through both bulk updates and individual changes to user rights, poses a significant risk if left unaddressed. The issue has been resolved in version 1.55, highlighting the importance of maintaining updated software to mitigate security threats.

References