CRITICAL 9.8 NuGet
Use of Hard-coded Credentials in AgileConfig.Client
GHSA-mj5w-w588-j6xg · CVE-2022-35540
Published · Modified
AI SAST
Find this class of vulnerability in your own code
Corgea's AI-native static analysis detects vulnerabilities like this one across your repositories, ranks them by exploitability, and returns review-ready fixes.
Description
Hardcoded JWT Secret in AgileConfig <1.6.8 Server allows remote attackers to use the generated JWT token to gain administrator access.
Ready to move
Start Securing
Free, no credit card | First findings in minutes