Static JWT Key enables unauthorized API access

Advisory ID: LVD-2024-012

CVSSv 4.0 Vector: AV:A/AC:H/AT:P/PR:N/UI:N/VC:H/VI:L/VA:L/SC:L/SI:L/SA:L

CVSSv 4.0 Base Score: 6.1

Severity: Medium

CVE: Pending

CWE: CWE-288

Date Published: 2024-10-02

Acknowledgments:

Mehmet D. Ince

Sr. Vulnerability Researcher

Prodaft