← Back to CVE List

CVE-2021-27884

Published: 2021-03-01T23:15Z
Last Modified: 2024-11-21T05:58Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
Weak JSON Web Token (JWT) signing secret generation in YMFE YApi through 1.9.2 allows recreation of other users' JWT tokens. This occurs because Math.random in Node.js is used. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt