critical9.8
CVE-2020-24876
Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
Impact
Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pancakeapp | Pancake | before 4.13.29 |