Lucene search
+L

3 matches found

NVD
NVD
•added 2025/06/10 9:15 p.m.•26 views

CVE-2025-35940

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints...

8.1CVSS0.0038EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/06/10 8:27 p.m.•11 views

CVE-2025-35940 Hard-coded ArchiverSpaApi JWT Signing Key

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints...

8.1CVSS7.3AI score0.0038EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2025/06/10 8:27 p.m.•35 views

CVE-2025-35940 Hard-coded ArchiverSpaApi JWT Signing Key

The ArchiverSpaApi ASP.NET application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints...

8.1CVSS0.0038EPSS
SaveExploits0References1
Rows per page
Query Builder