2021-03-01 23:00:51
mitre
PUBLISHED
Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users JWT tokens. This occurs because Math.random in Node.js is used.