by Kastro
Paper/Archive/CVE-2025-56749

CVE-2025-56749

mitre — Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing.

EPSS 0.5%public exploitCVSS 9.4
critical.is priorityof 100
46
CVSS 9.4 (ADP)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 40.9.409 × 208.2Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

Creativeitem Academy LMS up to and including 6.14 uses a hardcoded default JWT secret for token signing. This predictable secret allows attackers to forge valid JWT tokens, leading to authentication bypass and unauthorized access to any user account.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: partial

References

refsuryadina.com/academy-lms-jwt-secret-7k9m2x4p8q