CVE-2025-48070 — Plane is open-source project management software. Versions prior to 0.23 have insecure permissions in UserSerializer that allows users to change fields that are meant to be read-only, such as email. T — CVE Database · The Intelligence Room