CNNVD-202507-593 Information

CNNVD ID

CNNVD-202507-593

CVE-2025-7080

  • CNNVD Published: 2025-07-06

Description (Chinese)

Jank是Fender个人开发者的一个轻量级的博客系统。 Jank存在安全漏洞,该漏洞源于文件internal/utils/jwt_utils.go中参数accessSecret/refreshSecret使用硬编码密码。

Description (English)

Jank is a lightweight blog system for Finder’s personal developers. Jank has a security loophole, which stems from the use of hard code passwords for the parameters accessSecret/refreshSecret in document international/utils/jwt utils.go.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Live Support

Published

2025-07-06

Last Modified

2026-02-24

References

https://github.com/Done-0/Jank/issues/9 https://vuldb.com/?ctiid.314994 https://vuldb.com/?submit.603746 https://vuldb.com/?id.314994 https://access.redhat.com/security/cve/cve-2025-7080

Share on: