Lucene search
+L

CVE-2023-37266

🗓️ 23 May 2025 04:03:53Reported by redhat.comType 
redhatcve
 redhatcve
🔗 access.redhat.com👁 14 Views

Unauthenticated attackers can exploit CasaOS, execute commands via JWTs. Upgrade to 0.4.4 recommended.

Related
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC
CasaOS JWT Secret Handler Command Execution
25 Oct 202300:00
–bdu_fstec
circl
Circl
CVE-2023-37266
18 Jul 202300:45
–circl
cnnvd
CNNVD
CasaOS 授权问题漏洞
17 Jul 202300:00
–cnnvd
cnvd
CNVD
CasaOS Encryption Issues Vulnerabilities
19 Jul 202300:00
–cnvd
cve
CVE
CVE-2023-37266
17 Jul 202320:57
–cve
cvelist
Cvelist
CVE-2023-37266 Weak json web token (JWT) secrets in CasaOS
17 Jul 202320:57
–cvelist
github
Github Security Blog
CasaOS contains weak JWT secrets
17 Jul 202314:40
–github
gitlab
GitLab Advisory Database
CasaOS contains weak JWT secrets
17 Jul 202300:00
–gitlab
kittysploit
KittySploit
CasaOS < 0.4.4 - Authentication Bypass via Random JWT Token Detection
28 Jul 202611:27
–kittysploit
mend
Mend
CVE-2023-37266
17 Jul 202320:57
–mend
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

23 May 2025 04:03Current
7.9High risk
Vulners AI Score7.9
CVSS 3.19.8
EPSS0.06844
SSVC
14