Beveiligingsadvies

CVE-2024-56362

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-12-23 17:19:51

Laatst bijgewerkt 2024-12-24 01:35:29

Toegewezen door GitHub_M

CVSS-score 7.1

Status PUBLISHED

Beschrijving

Navidrome is an open source web-based music collection server and streamer. Navidrome stores the JWT secret in plaintext in the navidrome.db database file under the property table. This practice introduces a security risk because anyone with access to the database file can retrieve the secret. This vulnerability is fixed in 0.54.1.

← Alle CVE's bekijken Bekijk op cve.org ↗