Description

Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.

Remediation

References

https://github.com/dromara/sureness/issues/164

https://github.com/xubowenW/JWTissues/blob/main/sureness%20secure%20issues.md

Related Vulnerabilities

CVE-2023-27087 Vulnerability in maven package com.xuxueli:xxl-job

CVE-2018-3739 Vulnerability in npm package https-proxy-agent

CVE-2017-16008 Vulnerability in maven package org.webjars.bower:i18next

CVE-2019-18350 Vulnerability in npm package ant-design-pro

CVE-2017-16219 Vulnerability in npm package yttivy

Severity

Critical

Classification

CWE-798 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Exploit Issue Tracking Third Party Advisory