Skip to content
Threat Feed
Subscribe

Product

Django-Vue-Lyadmin (<= 3.2.12)

1 brief RSS
high advisory

Hard-Coded Cryptographic Key in Django-Vue-Lyadmin JWT Signing

The Django-Vue-Lyadmin project up to version 3.2.12 contains a hard-coded SECRET_KEY in backend/application/settings.py, allowing remote attackers to forge JWT tokens and gain unauthorized access.

Django-Vue-Lyadmin credential-access web-application authentication-bypass
1t 1c