Lucene search
GitHub Advisory DatabaseGHSA-XR8C-MQ5X-5F56HistoryNov 03, 2023 - 12:30 a.m.
Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
2023-11-0300:30:26
CWE-798
GitHub Advisory Database
github.com
6
dromara lamp-cloud
v3.8.1
cryptographic key
vulnerability
json web token
authentication
application
crafted token
Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.
| CPE | Name | Operator | Version |
|---|---|---|---|
| top.tangyh.basic:lamp-util | lt | 3.8.1 | |
| top.tangyh.basic:lamp-core | lt | 3.8.1 |
Related
cvelist
cvelist
CVE-2023-31579
2023-11-02 00:00:00
osv
osv
CVE-2023-31579
2023-11-02 22:15:08
Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key
2023-11-03 00:30:26
prion
prion
Hardcoded credentials
2023-11-02 22:15:00
cve
cve
CVE-2023-31579
2023-11-02 22:15:08
veracode
veracode
Use Of Hardcoded Cryptographic Key
2023-11-06 09:49:10