https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 21:30:36 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-236368 EUVD-2026-236368 https://cve.radiocsirt.org/vuln/euvd-2026-236368 https://cve.radiocsirt.org/vuln/fkie_cve-2022-44796 <p>An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn&#39;t produce cryptographically strong sequences. An attacker can predict these sequences and generate a JWT token. As a result, an attacker can get access to the Web UI. This is fixed in Object First Ootbi BETA build 1.0.13.1611.</p> <p>An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn&#39;t produce cryptographically strong sequences. An attacker can predict these sequences and generate a JWT token. As a result, an attacker can get access to the Web UI. This is fixed in Object First Ootbi BETA build 1.0.13.1611.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-44796 https://cve.radiocsirt.org/vuln/ghsa-39pq-3mh9-m5qg <p>An issue was discovered in Object First 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn&#39;t produce cryptographically strong sequences. An attacker can predict these sequences and generate a JWT token. As a result, an attacker can get access to the Web UI. This is fixed in 1.0.13.1611.</p> <p>An issue was discovered in Object First 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn&#39;t produce cryptographically strong sequences. An attacker can predict these sequences and generate a JWT token. As a result, an attacker can get access to the Web UI. This is fixed in 1.0.13.1611.</p> https://cve.radiocsirt.org/vuln/ghsa-39pq-3mh9-m5qg https://cve.radiocsirt.org/vuln/gsd-2022-44796 gsd-2022-44796 https://cve.radiocsirt.org/vuln/gsd-2022-44796