CVE-2023-53951
Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret
Résumé
Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com