Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2024/12/23 8:17 p.m.43 views

Navidrome Stores JWT Secret in Plaintext in navidrome.db

Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. The JWT secret is critical for the authentication and authorization system. If...

7.1CVSS7.1AI score0.00153EPSS
SaveExploits0References7Affected Software1
Rows per page
Query Builder