high7.5
CVE-2022-32430
Hardcoded JWT Token in Lin CMS Spring Boot
Impact
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.github.talelin:lin-cms-core | <= 0.2.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Talelin | Lin-Cms-Spring-Boot | Version 0.2.1 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://www.mesec.cn/archives/277
- https://www.mesec.cn/archives/278
- https://github.com/advisories/GHSA-q72p-4w56-hx7h
- https://nvd.nist.gov/vuln/detail/CVE-2022-32430
- https://github.com/TaleLin/lin-cms-spring-boot/blob/3fc25bd8c10c73db2e7230809b322127eac554e3/src/main/resources/application.yml#L43
- https://web.archive.org/web/20220721190946/https://www.mesec.cn/archives/277