CVE-2022-24860

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Use of Hard-coded Cryptographic Key vulnerability. An attacker can use hard coding to generate login credentials of any user and log in to the service background located at different IP addresses.

• CWE-321
• CWE-798

• https://github.com/vran-dev/databasir/blob/master/core/src/main/java/com/databasir/core/infrastructure/jwt/JwtTokens.javaExploit, Third Party Advisory
• https://github.com/vran-dev/databasir/security/advisories/GHSA-9prp-5jc9-jpggThird Party Advisory
• https://user-images.githubusercontent.com/75008428/163742517-ecc1c787-1ef6-4df9-bdf2-407b2b31e111.pngThird Party Advisory
• https://user-images.githubusercontent.com/75008428/163742566-a69c91e8-db20-4058-8967-1cfe86facc6d.pngThird Party Advisory
• https://user-images.githubusercontent.com/75008428/163742596-5c13153a-be8f-4ce3-9681-bc68b5f7e9c5.pngThird Party Advisory
• https://github.com/vran-dev/databasir/blob/master/core/src/main/java/com/databasir/core/infrastructure/jwt/JwtTokens.javaExploit, Third Party Advisory
• https://github.com/vran-dev/databasir/security/advisories/GHSA-9prp-5jc9-jpggThird Party Advisory
• https://user-images.githubusercontent.com/75008428/163742517-ecc1c787-1ef6-4df9-bdf2-407b2b31e111.pngThird Party Advisory
• https://user-images.githubusercontent.com/75008428/163742566-a69c91e8-db20-4058-8967-1cfe86facc6d.pngThird Party Advisory
• https://user-images.githubusercontent.com/75008428/163742596-5c13153a-be8f-4ce3-9681-bc68b5f7e9c5.pngThird Party Advisory

Published

Apr 20, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24855Metabase is an open source business intelligence and analyti…5.4
• CVE-2022-24856FlyteConsole is the web user interface for the Flyte platfor…7.5
• CVE-2022-24857django-mfa3 is a library that implements multi factor authen…8.8
• CVE-2022-24858next-auth v3 users before version 3.29.2 are impacted. next-…6.1
• CVE-2022-24859PyPDF2 is an open source python PDF library capable of split…5.5
• CVE-2022-2486A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-24861Databasir is a team-oriented relational database model docum…8.8
• CVE-2022-24862Databasir is a team-oriented relational database model docum…7.7
• CVE-2022-24863http-swagger is an open source wrapper to automatically gene…7.5
• CVE-2022-24864Origin Protocol is a blockchain based project. The Origin Pr…5.4
• CVE-2022-24865HumHub is an Open Source Enterprise Social Network. In affec…6.5
• CVE-2022-24866Discourse Assign is a plugin for assigning users to a topic …4.3