| Package | Affected versions | Patched versions |
|---|---|---|
| soplanning | ≤ 1.32 |
Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free