PerfreeBlog Hard-Coded Cryptographic Key Vulnerability in JWT Handler

A vulnerability exists in PerfreeBlog version 4.0.11 within the JWT Handler component, specifically in the JwtUtil function. This vulnerability involves the use of a hard-coded cryptographic key, which could potentially be exploited remotely. However, the complexity of the attack is considered high, making exploitation difficult.

Impact

The vulnerability allows for the use of a hard-coded cryptographic key, which could lead to unauthorized access or manipulation of data that relies on this key for encryption or authentication.