CNNVD-202510-1515 Information
CNNVD ID
CNNVD-202510-1515
Related CVE
- CNNVD Published: 2025-10-11
Description (Chinese)
Code-Projects Hospital Management System是Code-Projects开源的一个医院管理系统。 Code-Projects Hospital Management System 1.0版本存在安全漏洞,该漏洞源于express-session组件中session函数对参数secret的错误操作,可能导致使用硬编码密钥。
Description (English)
The Code-Projects Hospital Management System is a hospital management system open to Code-Projects. There is a security loophole in version 1.0 of Code-Project HSystem, which stems from the error of the copy function against the parameter secret in the extpress-session component, which may lead to the use of a hard-coded key.
Hazard Level
Critical
Vulnerability Type
其他
Affected Vendor
Code-Projects
Published
2025-10-11
Last Modified
2026-02-24
References
https://code-projects.org/ https://github.com/lakshayyverma/CVE-Discovery/blob/main/Hospital%20Management%20System.md https://vuldb.com/?ctiid.327932 https://vuldb.com/?id.327932 https://vuldb.com/?submit.672589
Share on: