top.tangyh.basic vulnerabilities

Products

• top.tangyh.basic/lamp-core 1
• top.tangyh.basic/lamp-util 1

Latest top.tangyh.basic CVEs

Newest publication first

1. CVE-2023-31579 Dromara Lamp-Cloud Use of Hard-coded Cryptographic Key

   Published 2023-11-02

   Critical·CVSS 9.8 EPSS 0.81%

   Dromara Lamp-Cloud before v3.8.1 was discovered to use a hardcoded cryptographic key when creating and verifying a Json Web Token. This vulnerability allows attackers to authenticate to the application via a crafted JWT token.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.