CVE-2022-36672

2022-09-0102:08:13

mitre

www.cve.org

novel-plus

v3.6.2

hard-coded

jwt key

vulnerability

custom user session

0.003 Low

EPSS

Percentile

71.3%

JSON

Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.

References

www.mesec.cn/archives/296

0.003 Low

EPSS

Percentile

71.3%

JSON

Related for CVELIST:CVE-2022-36672