Ng Antd Admin
Monthly
Authentication bypass in ng-antd-admin (an Angular + NestJS administration system template) before version 22.0, caused by a hardcoded default JWT signing secret that is active silently when a deployment has not overridden it. Unauthenticated remote attackers can sign their own tokens with the shipped secret, impersonate any user including administrators, and reach protected API endpoints for account takeover, data leakage and unauthorized operations; the flaw is only reachable on installs left in out-of-the-box configuration, since any deployment with a custom SECRET is not exposed through this issue. The project ships an explicit fix in 22.0 (release tag v22.0, commit 23e92ff) and the priority decision for this CVE is act_now; no public exploit code was identified at time of analysis.
Authentication bypass in ng-antd-admin (an Angular + NestJS administration system template) before version 22.0, caused by a hardcoded default JWT signing secret that is active silently when a deployment has not overridden it. Unauthenticated remote attackers can sign their own tokens with the shipped secret, impersonate any user including administrators, and reach protected API endpoints for account takeover, data leakage and unauthorized operations; the flaw is only reachable on installs left in out-of-the-box configuration, since any deployment with a custom SECRET is not exposed through this issue. The project ships an explicit fix in 22.0 (release tag v22.0, commit 23e92ff) and the priority decision for this CVE is act_now; no public exploit code was identified at time of analysis.