| Package | Affected versions | Patched versions |
|---|---|---|
| write-back manager | = 2.3.1 |
Xpand IT Write-back Manager v2.3.1 uses weak secret keys to sign JWT tokens. This allows attackers to easily obtain the secret key used to sign JWT tokens via a bruteforce attack.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free