CVE-2022-32430

HIGHNuclei

Hardcoded JWT Token in Lin CMS Spring Boot

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2022-32430 has a selected CVSS score of 7.5 (high); EIP currently links 1 Nuclei template.

Description

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

io.github.talelin:lin-cms-core

Browse Maven / io.github.talelin:lin-cms-core
GitHub AdvisoryThrough 0.2.1affected

Nuclei templates

1
ProjectDiscoveryHIGHLin CMS Spring Boot - Default JWT TokenCVSS 7.5

An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.

Impact

Unauthenticated attackers can access backend administrative information and functions using a hardcoded default JWT token, potentially gaining complete control over the Lin CMS Spring Boot application including user management and content administration.

Remediation

Update Lin CMS Spring Boot to a version later than 0.2.1 that uses unique JWT secret keys, removes hardcoded tokens, and implements proper token rotation.

AuthorsDhiyaneshDK
Template tagscvecve2022lin-cmsauth-bypasstalelinvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CPE: cpe:2.3:a:talelin:lin-cms-spring-boot:0.2.1:*:*:*:*:*:*:*
Shodan: http.html:"心上无垢，林间有风"
FOFA: body="心上无垢，林间有风"
https://github.com/TaleLin/lin-cms-spring-boot https://web.archive.org/web/20220721190946/https://www.mesec.cn/archives/277 https://nvd.nist.gov/vuln/detail/CVE-2022-32430

Source: ProjectDiscovery

References

6