xubowenW/JWTissues

xubowenW/JWTissues

GitHubGitHub
GitHubgithub.com
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2023-31579↗
9.8 CRITICAL—

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.

CVE-2023-31581↗
9.8 CRITICAL—

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.