CVE-2025-10671
LOWDescription
A vulnerability has been found in youth-is-as-pale-as-poetry e-learning 1.0. Impacted is the function encryptSecret of the file e-learning-master\exam-api\src\main\java\com\yf\exam\ability\shiro\jwt\JwtUtils.java of the component JWT Token Handler. The manipulation leads to insufficiently random values. The attack can be initiated remotely. The complexity of an attack is rather high. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used.
Is your site exposed to CVE-2025-10671?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2025-10671? +
How severe is CVE-2025-10671? +
How do I check if I'm vulnerable to CVE-2025-10671? +
Related Vulnerabilities
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Windows Cryptographic Services Security Feature Bypass Vulnerability
Cryptographic issue while performing RSA PKCS padding decoding.
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code …