CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

EUVD-2023-2629

Malicious code in bioql PyPI...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: OSV:GHSA-3J2F-58RQ-G6P7...

Sureness uses hardcoded key

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

GHSA-3J2F-58RQ-G6P7 Sureness uses hardcoded key

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: GHSA-3J2F-58RQ-G6P7...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

Hardcoded credentials

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

Dromara Sureness Trust Management Issues Vulnerability

Sureness is dromara open source a simple and efficient security framework . Focused on API protection. A security vulnerability exists in versions prior to Dromara Sureness v1.0.8 that stems from the use of hard-coded keys when creating and validating Json Web tokens...

CVE-2023-31581: Use of Hard-coded Credentials

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

com.usthe.sureness:spring-boot-starter-sureness (>=1.0.0-beta.1, <=1.0.7), org.noear:sureness-solon-plugin (>=1.3.35, <=2.5.12-m1) potentially affected by CVE-2023-31581 via com.usthe.sureness:sureness-core (>=1.0.3, <=1.0.7)

com.usthe.sureness:sureness-core MAVEN version =1.0.3, =1.0.0-beta.1, =1.3.35, =2.5.12-m1 Source cves: CVE-2023-31581 Source advisory: MEND:CVE-2023-31581...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

CVE-2023-31581

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key...

CVE-2023-31581

CVE-2023-31581 affects Dromara Sureness prior to v1.0.8, where a hardcoded key is used in JSON Web Token creation and validation. This issue is documented across multiple sources (Red Hat advisory, CVE listings, OSV, GHSA) and is described as a security vulnerability in Sureness before 1.0.8. The...

PT-2023-23397 · Dromara · Dromara Sureness

Name of the Vulnerable Software and Affected Versions: Dromara Sureness versions prior to 1.0.8 Description: The issue is related to the use of a hardcoded key in Dromara Sureness. Recommendations: For versions prior to 1.0.8, update to version 1.0.8 or later to resolve the issue...