Academy LMS CVE-2020-8749 JWT Hardcoded Secret Authentication Bypass

Key Information Vulnerability Overview Vulnerability Type: JWT Secret Vulnerability Affected Versions: Academy LMS v5.13 and earlier CVE ID: CVE-2020-8749 CVSS Score: 9.3 (Critical) Technical Details Affected Component: Default Key: Vulnerability Description: The application uses a hardcoded default JWT key for signing, allowing attackers to generate valid JWT tokens. Impact Attackers can: - Retrieve source code and discover the default key - Generate valid JWT tokens for any account - Bypass authentication mechanisms entirely - Escalate privileges to admin level - Access sensitive user data and system functionalities Proof of Concept Provides Python code example demonstrating how to generate forged JWT tokens using the default key. Affected Endpoints All API endpoints relying on JWT authentication, including: - User authentication endpoints - Course management APIs - Admin functionalities - Payment processing APIs Mitigation Measures Immediate Actions: - Immediately change JWT key to a cryptographically secure value - Invalidate all existing JWT tokens - Force all users to re-authenticate Recommended Implementation: - Store keys in environment variables - Implement JWT key rotation - Consider using RSA256 with public/private key pairs - Implement appropriate token expiration policies Timeline Discovery Date: July 2020 Vendor Notification: July 20, 2020 CVE Request Submitted: July 20, 2020 Public Disclosure: July 20, 2020 References Academy LMS Official Documentation JWT Security Best Practices

Goal Reached Thanks to every supporter — we hit 100%!

Academy LMS CVE-2020-8749 JWT Hardcoded Secret Authentication Bypass