1 matches found
Ryan Su Simple Admin encryption vulnerability
Ryan Su Simple Admin versions 1.8.7 and earlier have an encryption-related vulnerability. This vulnerability stems from the hardcoded value of Auth.AccessSecret in the api/etc/core.yaml file. Unverified attackers can exploit this public key to forge super administrator tokens. By using a JWT clai...
9.8CVSS5.8AI score0.00578EPSS
SaveExploits0References4
20