CVE-2024-8005 demozx gf_cms JWT Authentication auth.go init hard-coded credentials
Hard-coded credentials in the JWT authentication module allow remote attackers to gain unauthorized access and escalate privileges.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-8005?
CVE-2024-8005 is a medium-severity vulnerability in demozx gf_cms, published on 20 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A vulnerability was found in demozx gf_cms 1.0/1.0.1. It has been classified as critical. This affects the function init of the file internal/logic/auth/auth.go of the component JWT Authentication. The manipulation leads to hard-coded credentials. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 1.0.2 is able to address this issue. The patch is named be702ada7cb6fdabc02689d90b38139c827458a5. It is recommended to upgrade the affected component.
Weakness: CWE-798
Which versions are affected by CVE-2024-8005?
It affects 1 product.
Products include Demozx Gf Cms.
How do I fix CVE-2024-8005?
No fix has been published for CVE-2024-8005 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-8005 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-8005 exists.
Sources
Also known as GHSA-r39x-24mw-vr93.