CVE-2023-27583

PanIndex is a network disk directory index. In Panindex prior to version 3.1.3, a hard-coded JWT key `PanIndex` is used. An attacker can use the hard-coded JWT key to sign JWT token and perform any actions as a user with admin privileges. Version 3.1.3 has a patch for the issue. As a workaround, one may change the JWT key in the source code before compiling the project.

• CWE-321
• CWE-798

• https://github.com/px-org/PanIndex/commit/f7ec0c5739af055ad3a825a20294a5c01ada3302Patch
• https://github.com/px-org/PanIndex/releases/tag/v3.1.3Release Notes
• https://github.com/px-org/PanIndex/security/advisories/GHSA-82wq-gmw8-g87vVendor Advisory
• https://github.com/px-org/PanIndex/commit/f7ec0c5739af055ad3a825a20294a5c01ada3302Patch
• https://github.com/px-org/PanIndex/releases/tag/v3.1.3Release Notes
• https://github.com/px-org/PanIndex/security/advisories/GHSA-82wq-gmw8-g87vVendor Advisory

Published

Mar 13, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-27578Galaxy is an open-source platform for data analysis. All sup…7.5
• CVE-2023-27579TensorFlow is an end-to-end open source platform for machine…7.5
• CVE-2023-2758A denial of service vulnerability exists in Contec CONPROSYS…5.3
• CVE-2023-27580CodeIgniter Shield provides authentication and authorization…5.9
• CVE-2023-27581github-slug-action is a GitHub Action to expose slug value o…8.8
• CVE-2023-27582maddy is a composable, all-in-one mail server. Starting with…9.8
• CVE-2023-27584Dragonfly is an open source P2P-based file distribution and …9.8
• CVE-2023-27585PJSIP is a free and open source multimedia communication lib…7.5
• CVE-2023-27586CairoSVG is an SVG converter based on Cairo, a 2D graphics l…7.1
• CVE-2023-27587ReadtoMyShoe, a web app that lets users upload articles and …6.5
• CVE-2023-27588Hasura is an open-source product that provides users GraphQL…7.5
• CVE-2023-27589Minio is a Multi-Cloud Object Storage framework. Starting wi…6.5