FUXA Hard-Coded Credential Vulnerability in JWT Token Management

A hard-coded credential vulnerability exists in FUXA version 1.2.7 within the JWT token management module. The application uses a fixed secret key to sign and verify JSON Web Tokens, enabling remote attackers to forge valid admin tokens. This exploitation allows them to bypass authentication and gain full administrative access.

Impact

Exploitation of this vulnerability allows for authentication bypass, enabling unauthorized users to gain administrative privileges.