Skip to content

Taier存在JWT硬编码漏洞 #1176

Description

@hhyhgoboy

Search before asking

  • I had searched in the issues and found no similar question.

  • I had searched my question on the internet but i didn't get any help.

  • I had read the documentation: Taier doc but it didn't help me.

Description

Taier存在JWT硬编码漏洞。 由于开发者使用硬编码,导致攻击者可以伪造jwt token实现权限绕过随意访问后台数据。 修复建议 使用随机数生成新的密钥 如何修复

Code of Conduct

Activity

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionFurther information is requested

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions