SecurityClawvet API Secret Flaw Exposed
A hard-coded JWT secret in self-hosted clawvet API servers allows remote attackers to bypass authentication and harvest sensitive data.
> Search
2 results for “jwt”
2 results for “jwt”
SecurityA hard-coded JWT secret in self-hosted clawvet API servers allows remote attackers to bypass authentication and harvest sensitive data.
SecurityA hard-coded JWT secret in self-hosted Clawvet API versions prior to 0.7.5 allows unauthenticated access to sensitive user information.