Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-x36r-gfxq-7c9x

Опубликовано: 02 сент. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.

EPSS

Процентиль: 51%
0.0028
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798

Связанные уязвимости

CVSS3: 9.8
nvd
больше 3 лет назад

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.

EPSS

Процентиль: 51%
0.0028
Низкий

9.8 Critical

CVSS3

Дефекты

CWE-798