saltbo/zpan

saltbo/zpan

GitHubGitHub
GitHubgithub.com
zpan.spacezpan.space
Releases40
Frequency2 months 1 day
Last Release
Stars2.03K
A self-hosted cloud disk base on the cloud storage./ 一个基于云存储的网盘系统，用于自建私人网盘或企业网盘。
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2025-7453↗
3.7 LOW2.6 LOW

A vulnerability was found in saltbo zpan up to 1.6.5/1.7.0-beta2. It has been rated as problematic. This issue affects the function NewToken of the file zpan/internal/app/service/token.go of the component JSON Web Token Handler. The manipulation with the input 123 leads to use of hard-coded password. The attack may be initiated remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.