Weakness (CWE)
CWE-1320: Improper Protection for Outbound Error Messages and Alert Signals
Base Draft
Untrusted agents can disable alerts about signal conditions exceeding limits or the response mechanism that handles such alerts.
How to prevent it (1 mitigation)
-
Architecture and Design
Alert signals generated by critical events should be protected from access by untrusted agents. Only hardware or trusted firmware modules should be able to alter the alert configuration.
Source: MITRE CWE-1320
1 result · Clear filters · Feed
-
Medium 5.6
nocobase JWT Service jwt-service.ts hard-coded key
A vulnerability was detected in nocobase up to 1.9.4/2.0.0-alpha.37. The affected element is an unknown function of the file nocobase\packages\core\auth\src\base\jwt-service.ts of the component JWT Service. The manipulation of the argument API_KEY results in …