Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/03/09 8:1 a.m.2 views

CVE-2026-28678

DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens JWTs were stored in HTTP cookies without cryptographic protection...

9.1CVSS5.7AI score0.00034EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/03/07 4:6 p.m.2 views

CVE-2026-28678

DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens JWTs were stored in HTTP cookies without cryptographic protection...

8.1CVSS5.7AI score0.00034EPSS
Exploits0References3
EUVD
EUVD
added 2026/03/07 4:6 p.m.3 views

EUVD-2026-10157

DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens JWTs were stored in HTTP cookies without cryptographic protection...

8.1CVSS5.7AI score0.00034EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/03/07 4:6 p.m.0 views

CVE-2026-28678 dsa-hub-server: Clear-Text Storage of Sensitive Data

DSA Study Hub is an interactive educational web application. Prior to commit d527fba, the user authentication system in server/routes/auth.js was found to be vulnerable to Insufficiently Protected Credentials. Authentication tokens JWTs were stored in HTTP cookies without cryptographic protection...

8.1CVSS5.7AI score0.00034EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/03/07 12:0 a.m.2 views

DSA Study Hub 安全漏洞

DSA Study Hub is an interactive data structure and algorithm learning platform developed by toxicbishop, a personal developer. Previous versions of DSA Study Hub d527fba had security vulnerabilities. These vulnerabilities stemmed from the fact that authentication tokens were stored in HTTP cookie...

9.1CVSS5.8AI score0.00034EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/03/07 12:0 a.m.2 views

PT-2026-23866

Name of the Vulnerable Software and Affected Versions DSA Study Hub versions prior to commit d527fba Description The user authentication system in the application’s server/routes/auth.js component had a flaw related to insufficiently protected credentials. Authentication tokens, specifically JWTs...

9.1CVSS5.8AI score0.00034EPSS
Exploits0References8
Rows per page
Query Builder