Hardcoded JWT Token in Lin CMS Spring Boot · CVE-2022-32430 · GitHub Advisory Database · GitHub

Hardcoded JWT Token in Lin CMS Spring Boot

High severity GitHub Reviewed Published Jul 22, 2022 to the GitHub Advisory Database • Updated Aug 17, 2023

Package

io.github.talelin:lin-cms-core (Maven)

Affected versions

<= 0.2.1

Patched versions

None

Description

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.

References

Published by the National Vulnerability Database

Jul 21, 2022

Published to the GitHub Advisory Database Jul 22, 2022

Reviewed Jul 11, 2023

Last updated Aug 17, 2023

Severity

High

7.5

/ 10

CVSS base metrics

Attack vector

Network

Attack complexity

Low

Privileges required

None

User interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

None

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N