Description
European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. The affected versions are 5.15.0 through 6.27.5.
Critical · 9.8
CVE-2023-26089
EUVD-2023-29963GHSA-29gh-89p4-ffqv
European Chemicals Agency IUCLID 6.x before 6.27.6 allows authentication bypass because a weak hard-coded secret is used for JWT signing. T…
Published May 2, 2023 · Updated Jan 30, 2025 · Assigned by mitre