Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-5wcp-x98w-p534

Опубликовано: 10 июн. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.

EPSS

Процентиль: 27%
0.00095
Низкий

8.1 High

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 8.1
nvd
8 месяцев назад

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.

EPSS

Процентиль: 27%
0.00095
Низкий

8.1 High

CVSS3

Дефекты

CWE-798