{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"0.2.1"}],"component":"io.github.talelin:lin-cms-core","cve_ids":["CVE-2022-32430"],"ecosystem":"Maven","epss":0.05045,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-q72p-4w56-hx7h","id":"tcs_01M5N98X5431N1737Y5FWH1CD7","modified_at":"2024-02-16T08:06:32.211031Z","published_at":"2022-07-22T00:00:37Z","references":["https://osv.dev/vulnerability/GHSA-q72p-4w56-hx7h","https://nvd.nist.gov/vuln/detail/CVE-2022-32430","https://github.com/TaleLin/lin-cms-spring-boot","https://github.com/TaleLin/lin-cms-spring-boot/blob/3fc25bd8c10c73db2e7230809b322127eac554e3/src/main/resources/application.yml#L43","https://web.archive.org/web/20220721190946/https://www.mesec.cn/archives/277"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q72p-4w56-hx7h","url":"https://osv.dev/vulnerability/GHSA-q72p-4w56-hx7h"}],"summary":"Hardcoded JWT Token in Lin CMS Spring Boot"}