← Back

Lamp Cloud

lamp-cloud

Vendor: Tangyh • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Tangyh
1Lamp Cloud
Jun 17, 2026
Nov 2, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT...Show more
Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.Show less