CVE-2025-56749
Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows attackers to forge valid JWT tokens, leading to authentication bypass and unauthorized access to any user account.
Vendor
Product
CWE
Yayın Tarihi
2025-10-15 15:16:04
Güncelleme
2025-10-21 19:24:31
Source Identifier
cve@mitre.org
KEV Date Added
-