Raj Nandan Sharma Kener encryption issue vulnerability

Versions 3.0.0 through 4.1.10 of Kener contain an encryption vulnerability stemming from authentication bypass. When KENERSECRETKEY is empty or unset, attackers can exploit the hard-coded DUMMYSECRET fallback key to forge session tokens. This allows them to issue kener-user cookies for access or...