[webapps] Duplicati 2.2.0.3 - JWT Signing Key Leak
AI summary · glm-5.3-flashSummaries by Vani AI
A public exploit exposes JWT signing key leakage in backup software Duplicati 2.2.0.3, risking session forgery.
Exploit-DB published exploit #52646 for Duplicati 2.2.0.3, a backup application. The issue leaks the JWT signing key, which could let an attacker forge authentication tokens. The disclosure does not report any exploitation in the wild.
Key facts
- Exploit-DB entry 52646 targets Duplicati 2.2.0.3
- JWT signing key leak enables potential token forgery
- No confirmed in-the-wild exploitation noted
From the original article
exploit-db.com
This source shares headlines only. Summary, key facts and assessment above are AI-written from the article and can be wrong.