https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 05:08:24 +0000 https://cve.radiocsirt.org/vuln/cve-2023-48396 <p><strong>Affected:</strong> Apache Software Foundation Apache SeaTunnel Web, apache seatunnel</p> <p>Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user.</p> <p>Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0.</p> <p>Users are recommended to upgrade to version 1.0.1, which fixes the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache SeaTunnel Web, apache seatunnel</p> <p>Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user.</p> <p>Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0.</p> <p>Users are recommended to upgrade to version 1.0.1, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/cve-2023-48396