CVE-2025-9210

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

高CWE-347 全部 CVE

弱点类型

Missing signature validation in JSON Web Tokens in Otalio Ship Property Management System versions before 2.22.0 allows authenticated attackers to escalate privileges via tampering with JWTs

参考链接

https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2026/MNDT-2026-0023.md
https://www.otalio.com/solutions/

赶在攻击者之前发现漏洞。

使用 GitHub 登录，一分钟内即可运行你的第一次审计。免费版无需信用卡。

开始免费审计查看价格