CVE-2014-8675: Soplanning

High severity, CVSS 7.5. EPSS: 12.5% chance of exploitation in the next 30 days.

Soplanning 1.32 and earlier generates static links for sharing ICAL calendars with embedded login information, which allows remote attackers to obtain a calendar owner's password via a brute-force attack on the embedded password hash.

Affected products

• Soplanning Soplanning: up to and including 1.32

Published 2017-08-31. Last modified 2026-06-17.