macrozheng mall JWT Token default key

CVE-2024-11619

What is CVE-2024-11619?

A significant vulnerability has been identified in the Macrozheng Mall application, particularly affecting the JWT Token Handler component. This vulnerability stems from the usage of a default cryptographic key, which can compromise the integrity of security tokens. The complexity associated with exploiting this vulnerability is notably high, indicating that an attacker would need to navigate a challenging path to succeed. Despite early notification to the vendor regarding this issue, there has been no response, and related discussions on GitHub were subsequently removed without clarification, raising concerns about transparency and user awareness.

References