GHSA-q72p-4w56-hx7h
Hardcoded JWT Token in Lin CMS Spring Boot
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | io.github.talelin:lin-cms-core | <= 0.2.1 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
References
External links from the advisory. They lead to third-party sites.
- https://nvd.nist.gov/vuln/detail/CVE-2022-32430
- https://github.com/TaleLin/lin-cms-spring-boot
- https://github.com/TaleLin/lin-cms-spring-boot/blob/3fc25bd8c10c73db2e7230809b322127eac554e3/src/main/resources/application.yml#L43
- https://web.archive.org/web/20220721190946/https://www.mesec.cn/archives/277