Threats tagged 'ghsa-rj9v-f992-cxp8'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-125383INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass Critical9.32026-11-10GCVE DatabaseCVE-2026-125383 INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) versions before 10.20261109 have an authentication bypass vulnerability due to a hard-coded JWT signing key, issuer, and audience in the appsettings.json file. This flaw allows unauthenticated remote attackers to forge tokens for any user ID and role trusted by the token validator, potentially granting administrator access to the entire API. Report on CVE-2026-125383 Vulnerability CWE-321 #ghsa-rj9v-f992-cxp8	GCVE Database	2026-11-10

Page 1 of 1