Filtered by vendor Pancakeapp Subscriptions
Filtered by product Pancake Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-24876 1 Pancakeapp 1 Pancake 2024-08-04 9.8 Critical
Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.