Skip to content
OpenAdvisories

Vendor

Gravitee

1 known vulnerabilities.

Products

Gravitee API Management 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.1
    CVE-2020-37281

    Gravitee API Management through 4.12.22 Default JWT Secret Authentication Bypass

    Gravitee API Management through 4.12.22 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to impersonate any user by forging JWTs signed with the shipped default jwt.secret. Attackers knowing an existing user ID can …

    Gravitee Gravitee API Management