Improper Access Control
Discription
github.com/awake1t/linglong is vulnerable to access control bypass. The vulnerability exists in the `jwt.go` due to the hard coded jwt token which allows an attacker to craft a malicious cookie and gain access to the system.Read More
References
https://github.com/awake1t/linglong/blob/master/pkg/utils/jwt.go#L10https://github.com/awake1t/linglong/issues/74https://github.com/advisories/GHSA-jgw5-rv3f-4326Back to Main