ID:4896 - Exploit for Cleartext storage of sensitive information in Playground Sessions - CVE-2020-24227

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to gain access to potentially sensitive information.

The vulnerability exists due to the affected software stores the user credentials in plain text. A remote attacker can access to UserProfiles.sol to extract the email and password.

Remediation