Apache Dubbo Admin 0.6.0 Hardcoded JWT Secret Authentication Bypass

Apache Dubbo Admin version 0.6.0 contains a public hardcoded default JWT signing secret that allows remote unauthenticated attackers to forge root session tokens and bypass authentication when the default secret remains configured. Apache Dubbo Admin 0.6.0 Hardcoded Default JWT Secret...