Description
Dromara Sureness before v1.0.8 was discovered to use a hardcoded key.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.usthe.sureness:sureness-core | < 1.0.8 | 1.0.8 | GHSA-3j2f-58rq-g6p7 |
Critical · 9.8
CVE-2023-31581
EUVD-2023-2629GHSA-3j2f-58rq-g6p7
Sureness uses hardcoded key
Published Oct 24, 2023 · Updated Sep 17, 2024 · Assigned by mitre