CVE-2023-25403 | BDVDB-2026-196665 Detail

Description#

CleverStupidDog yf-exam v 1.8.0 is vulnerable to Authentication Bypass. The program uses a fixed JWT key, and the stored key uses username format characters. Any user who logged in within 24 hours. A token can be forged with his username to bypass authentication.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12023-03-03Record published in the CVE List.
2. Version 22025-03-07Most recent update recorded in the CVE List.