CVE-2022-32430
Hardcoded JWT Token in Lin CMS Spring Boot
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
- Record
CVE-2022-32430- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Updated
- 2026-11-02
CVE List No score
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
- Record
CVE-2022-32430- Updated
- 2026-11-02
EUVDEUVD-2022-6395 No score
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
- Record
EUVD-2022-6395- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q72p-4w56-hx7h
Hardcoded JWT Token in Lin CMS Spring Boot
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
- Record
GHSA-q72p-4w56-hx7h- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-668
- Updated
- 2026-11-02
OSVGHSA-q72p-4w56-hx7h
Hardcoded JWT Token in Lin CMS Spring Boot
An access control issue in Lin CMS Spring Boot v0.2.1 allows attackers to access the backend information and functions within the application.
- Record
GHSA-q72p-4w56-hx7h- CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-668
- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
io.github.talelin:lin-cms-coreMaven |
through 0.2.1 | None known |
io.github.talelin:lin-cms-coreMaven |
through 0.2.1, plus listed versions 0.0.1-RC10.0.1-RC20.0.1-RC30.0.1-RC40.0.1-RC5 Show 8 moreShow less0.0.1-RC60.1.0-RELEASE0.1.1-RC10.1.1-RC20.1.1-RC30.2.0-RC10.2.0-RC20.2.0-RELEASE |
None known |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Nuclei | Lin CMS Spring Boot - Default JWT Token |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, Nuclei, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-32430 is a high vulnerability (CVSS 7.5) in Talelin Lin-cms-spring-boot, published July 21, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 5.04%, the 92nd percentile. No source names a fixed version.
References
mesec.cn/archives/278
nvd.nist.gov/vuln/detail/CVE-2022-32430
github.com/TaleLin/lin-cms-spring-boot/blob/3fc25bd8c10c73db2e7230809b322127eac554e3/src/main/resources/application.yml
web.archive.org/web/20220721190946/https://www.mesec.cn/archives/277