Lucene search

K
cvelistMitreCVELIST:CVE-2023-31579
HistoryNov 02, 2023 - 12:00 a.m.

CVE-2023-31579

2023-11-0200:00:00
mitre
www.cve.org
dromara lamp-cloud
cryptographic key
json web token
attackers
authenticate
vulnerability

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.

9.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.1%

Related for CVELIST:CVE-2023-31579