cve-services 安全漏洞

cve-services is an open source project. It is used to operate the CVE Services API. A security vulnerability exists in cve-services that originates from the storage of randomKey in plain text in the data.js script. a remote attacker could gain unauthorized access to sensitive information on the...