A vulnerability was found in makeplane plane up to 1.1.x. It has been declared as critical. The affected element is an unknown function of the file /api/workspaces/:slug/members/. Such manipulation of the argument display_name leads to improper access controls.
This vulnerability is uniquely identified as CVE-2025-69284. The attack can be launched remotely. No exploit exists.
It is recommended to upgrade the affected component.
