Description
Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Gauzy | ever gauzy | 0.281.9 | — |
References
- ExploitDB-51354 exploit
- Official Product Homepage product
- VulnCheck Advisory: Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret third-party-advisory