PT-2026-134528

Name of the Vulnerable Software and Affected Versions AJ-Report versions 1.0 through 1.7.1 Description The software uses a hard-coded JWT secret to sign share tokens, which enables attackers to forge valid tokens offline. By creating a token with the reportCode variable set to 'dataSet', an...