Description
Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.
Remediation
References
https://github.com/dromara/lamp-cloud/issues/183
https://github.com/xubowenW/JWTissues/blob/main/lamp%20issue.md
Related Vulnerabilities
CVE-2022-25927 Vulnerability in npm package ua-parser-js
CVE-2022-26969 Vulnerability in npm package directus
CVE-2014-10068 Vulnerability in npm package inert
CVE-2023-39155 Vulnerability in maven package org.jenkins-ci.plugins:chef-identity
CVE-2023-29566 Vulnerability in npm package dawnsparks-node-tesseract