Lucene search
+L

18 matches found

NVD
NVD
•added 2026/10/30 3:16 p.m.•5 views

CVE-2026-61737

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS0.00507EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/30 2:34 p.m.•4 views

CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/10/30 2:34 p.m.•6 views

EUVD-2026-114000

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits0References3
CVE
CVE
•added 2026/10/30 2:34 p.m.•11 views

CVE-2026-61737

The ng-antd-admin administration system template (Angular and NestJS) is vulnerable to authentication bypass due to a hardcoded default JWT secret in versions prior to 22.0 . If a deployment fails to replace this default secret, an attacker can forge tokens to impersonate any user, including admi...

9.8CVSS5.8AI score0.00507EPSS
SaveExploits0References3
osv_cve
osv_cve
•added 2026/10/30 2:34 p.m.•10 views

CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS5.9AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2026/10/30 2:34 p.m.•21 views

CVE-2026-61737 ng-antd-admin: Hardcoded JWT Secret allows Authentication Bypass in ng-antd-admin

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS0.00507EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/30 12:00 a.m.•4 views

CVE-2026-61737: huajian123 ng-antd-admin: ng-antd-admin is an Angular and NestJS administration system template

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS5.9AI score0.00507EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/30 12:00 a.m.•3 views

PT-2026-133609

ng-antd-admin is an Angular and NestJS administration system template. Prior to 22.0, a hardcoded default JWT secret permits token forgery when a deployment has not replaced the default secret, without a startup warning. An attacker can bypass authentication and authorization, impersonate any use...

9.8CVSS5.9AI score0.00507EPSS
SaveExploits0References4
KittySploit
KittySploit
•added 2026/07/28 11:27 a.m.•8 views

AntD Admin - Sensitive Information Disclosure Detection

AntD Admin has a security vulnerability that stems from Antd-admin 5.5.0 being affected by an incorrect access control vulnerability. Attackers can exploit this vulnerability to gain unauthorized access to some front-end interfaces, resulting in the leakage of sensitive information such as user...

7.5CVSS7.3AI score0.04388EPSS
SaveExploits2References4
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•29 views

EUVD-2021-33054

Malicious code in bioql PyPI...

7.5CVSS7.4AI score0.04388EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/02/14 4:15 p.m.•18 views

CVE-2021-46371

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...

7.5CVSS7.2AI score0.04388EPSS
SaveExploits2References2
osv_cve
osv_cve
•added 2022/02/14 4:15 p.m.•10 views

CVE-2021-46371

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...

7.5CVSS5.5AI score0.04388EPSS
SaveExploits2References1
NVD
NVD
•added 2022/02/14 4:15 p.m.•45 views

CVE-2021-46371

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...

7.5CVSS0.04388EPSS
SaveExploits2References1
Prion
Prion
•added 2022/02/14 4:15 p.m.•29 views

Improper access control

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...

5CVSS7.5AI score0.04388EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/02/14 3:22 p.m.•44 views

CVE-2021-46371

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...

7.7AI score0.04388EPSS
SaveExploits2References1
CVE
CVE
•added 2022/02/14 3:22 p.m.•124 views

CVE-2021-46371

CVE-2021-46371 affects the frontend framework AntD-Admin (version 5.5.0). The NVD description states an incorrect access control vulnerability that allows unauthorized access to certain foreground interfaces, leading to leakage of sensitive information. The CVSS data indicates a high impact for t...

7.5CVSS7.4AI score0.04388EPSS
SaveExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/14 12:00 a.m.•8 views

CVE-2021-46371: Missing Authentication for Critical Function

antd-admin 5.5.0 is affected by an incorrect access control vulnerability. Unauthorized access to some interfaces in the foreground leads to leakage of sensitive information...

7.5CVSS7.2AI score0.04388EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2022/02/14 12:00 a.m.•45 views

PT-2022-12677

Name of the Vulnerable Software and Affected Versions antd-admin version 5.5.0 Description The issue is related to incorrect access control, allowing unauthorized access to certain interfaces, which can lead to the leakage of sensitive information. Recommendations For antd-admin version 5.5.0, at...

7.5CVSS7.1AI score0.04388EPSS
SaveExploits2References7
Rows per page
Query Builder