Dotnetcore

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Dotnetcore records in CISA KEV

No Dotnetcore vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Agileconfig · all components

TI-2022-16070 CVE-2022-35540 · GHSA-mj5w-w588-j6xg

MEDIUM 45

Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01522 Published 2022-08-18 Fixed in 1.6.8 CWE-798