Lucene search
+L

1 matches found

Veracode
Veracode
added 2023/07/19 2:08 a.m.27 views

Weak JWT Secrets

github.com/IceWhaleTech/CasaOS is vulnerable to Weak JWT Secrets. The vulnerability exists because the InitV1Router function of v1.go and InitV2Router function of v2.go does not properly validate the JWT tokens, which allows an attacker to send maliciously crafted JWTs and access the features tha...

9.8CVSS7.7AI score0.06844EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder