Поиск уязвимостей
Количество 3
Количество 3
CVE-2024-56362
Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. This vulnerability is fixed in 0.54.1.
GHSA-xwx7-p63r-2rj8
Navidrome Stores JWT Secret in Plaintext in navidrome.db
ALT-PU-2024-17848
ALT-PU-2024-17848: package `navidrome` update to version 0.54.3-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-56362 Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. This vulnerability is fixed in 0.54.1. | CVSS3: 5.5 | 0% Низкий | почти 2 года назад |
| GHSA-xwx7-p63r-2rj8 Navidrome Stores JWT Secret in Plaintext in navidrome.db | CVSS3: 7.1 | 0% Низкий | почти 2 года назад |
| ALT-PU-2024-17848 ALT-PU-2024-17848: package `navidrome` update to version 0.54.3-alt1 | CVSS3: 9.9 | почти 2 года назад |
Уязвимостей на страницу