| عنوان | https://gitee.com/youth-is-as-pale-as-poetry/e-learning ExamSystem V1.0 Authentication Bypass Issues |
|---|
| الوصف | There is a JWT forgery vulnerability, which allows attackers to log in to any account (for which the username is known) using a forged JWT. |
|---|
| المصدر | ⚠️ https://github.com/SuJing-cy/CVE/blob/main/yfhl.md |
|---|
| المستخدم | chen_yun_n (UID 90117) |
|---|
| ارسال | 11/09/2025 09:41 PM (1 سنة منذ) |
|---|
| الاعتدال | 18/09/2025 07:40 AM (6 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 324792 [youth-is-as-pale-as-poetry e-learning 1.0 JWT Token JwtUtils.java encryptSecret تشفير ضعيف] |
|---|
| النقاط | 15 |
|---|