CVE-2020-24876
Use of a hard-coded cryptographic key in Pancake versions < 4.13.29 allows an attacker to forge session cookies, which may lead to remote privilege escalation.
CVSS 3.1 · 9.8 Critical
EPSS 1.7%
KEV · Not listed
Vendors
Products