Novel-Plus v3.6.2 was discovered to contain a hard-coded JWT key located in the project config file. This vulnerability allows attackers to create a custom user session.Read More ...
Continue Reading
August 31, 2022
Hardcoded JWT Secret in AgileConfig Read More ...
Continue Reading
August 31, 2022
Hardcoded JWT Secret in AgileConfig Read More ...
Continue Reading
August 30, 2022
Hardcoded JWT Secret in AgileConfig Read More ...
Continue Reading
August 30, 2022
JSON Web Tokens (JWTs for short) are the new standard for transmitting identity information in the digital age. JWTs are JSON objects that act as an identifier for your user or application. Theyre u ...
Continue Reading
August 26, 2022
Hi, Spring fans! Welcome to another installment of _This Week in Spring_! We've got a _ton_ to cover, so let's dive right into it! * [A Bootiful Podcast: Flowable founder Joram Barrez on a Bootiful ...
Continue Reading
August 23, 2022
Cockpit Content Platform through version 2.2.1 is vulnerable to a two-factor authentication (2FA) bypass. The 2FA secret is disclosed in a JWT token after user logs into their account, allowing an att ...
Continue Reading
August 18, 2022
Back to Main
