CVE-2025-14261 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes i…
High CVSS: 7.1

CVE-2025-14261

The Litmus platform uses JWT for authentication and authorization, but the secret being used for signing the JWT is only 6 bytes long at its core, which makes it extremely easy to crack.
Vendor
-
Product
-
CWE
CWE-331
Yayın Tarihi
2025-12-08 19:15:48
Güncelleme
2025-12-09 18:37:33
Source Identifier
reefs@jfrog.com
KEV Date Added
-

Kategoriler

CWE-331 HIGH 2025

Referanslar

https://github.com/litmuschaos/litmus/pull/5324 https://research.jfrog.com/vulnerabilities/litmus-jwt-missing-entropy-elevation-jfsa-2025-001648159/