Skip to content
OpenAdvisories
Critical · 9.8 Scanner template CVE-2023-5074 EUVD-2023-57415GHSA-q4wc-wj28-4hxh

Authentication Bypass in D-Link D-View 8

Published Sep 20, 2023 · Updated Sep 24, 2024 · Assigned by tenable

Description

Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28

Affected products

VendorProductAffectedFixed
D-Link D-View 8 2.0.1.28 —

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References