PT-2026-115207

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, checkApiAuth in src/main/java/com/erudika/scoold/utils/ScooldUtils.java accepts a JWT signed with app secret key or para secret key for /api/config and /api/stats without requiring a registered API-key jti, and maps the...