High severity8.8NVD Advisory· Published Nov 22, 2023· Updated Jun 17, 2026

CVE-2023-47315

Description

Headwind MDM Web panel 5.22.1 is vulnerable to Incorrect Access Control due to a hard-coded JWT Secret. The secret is hardcoded into the source code available to anyone on Git Hub. This secret is used to sign the application’s JWT token and verify the incoming user-supplied tokens.

Affected products

Headwind/MDM Web paneldescription
Headwind MDM/Headwind MDMllm-fuzzy
Range: =5.22.1

Patches

Vulnerability mechanics

References

boltonshield.com/en/cve/cve-2023-47315/nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000