Security Advisory

CVE-2023-31579

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2023-11-02 00:00:00
Last updated 2024-09-17 13:35:02
Assigner mitre
State PUBLISHED

Description

Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.