Vulnerabilities > Ymfe > Yapi > 1.3.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-03-01 | CVE-2021-27884 | Use of Insufficiently Random Values vulnerability in Ymfe Yapi Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. | 5.1 |