Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/12/09 6:29 p.m.2 views

CVE-2025-14261

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack...

7.1CVSS7AI score0.00058EPSS
Exploits0References1
EUVD
EUVD
added 2025/12/08 9:30 p.m.2 views

EUVD-2025-201794

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack...

7.1CVSS6.4AI score0.00058EPSS
Exploits0References3
NVD
NVD
added 2025/12/08 7:15 p.m.3 views

CVE-2025-14261

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack...

7.1CVSS0.00058EPSS
Exploits0References2
OSV
OSV
added 2025/12/08 7:15 p.m.7 views

CVE-2025-14261

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack...

7.1CVSS5.8AI score
Exploits0References2
Positive Technologies
Positive Technologies
added 2025/12/08 12:0 a.m.3 views

PT-2025-49585

Name of the Vulnerable Software and Affected Versions Litmus Platform affected versions not specified Description The Litmus platform utilizes JWT for authentication and authorization; however, the JWT signing secret key is only 6 bytes in length, making it susceptible to cracking. This allows fo...

7.1CVSS6.6AI score0.00058EPSS
Exploits0References7
Rows per page
Query Builder