Логотип exploitDog
bind:CVE-2025-14261
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-14261

Количество 2

Количество 2

nvd логотип

CVE-2025-14261

2 месяца назад

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.

CVSS3: 7.1
EPSS: Низкий
github логотип

GHSA-836x-3v5w-54f3

2 месяца назад

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.

CVSS3: 7.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-14261

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.

CVSS3: 7.1
0%
Низкий
2 месяца назад
github логотип
GHSA-836x-3v5w-54f3

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.

CVSS3: 7.1
0%
Низкий
2 месяца назад

Уязвимостей на страницу