CVE-2023-53951
Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret
Summary
Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret
Original description
The description as published by the source.
Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.
References
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com