Use of a static key to protect a JWT token used in user authentication can allow an for an authentication bypass in D-Link D-View 8 v2.0.1.28
- https://www.tenable.com/security/research/tra-2023-32
- https://github.com/codeb0ss/CVE-2023-5074-PoC
- https://github.com/nomi-sec/PoC-in-GitHub