CVE-2025-23027
Jan. 13, 2025, 8:15 p.m.
Tags
Product(s) Impacted
next-forge
Description
next-forge is a Next.js project boilerplate for modern web application. The BASEHUB_TOKEN commited in apps/web/.env.example. Users should avoid use of this token and should remove any access it may have in their systems.
Weaknesses
CWE-312
Cleartext Storage of Sensitive Information
The product stores sensitive information in cleartext within a resource that might be accessible to another control sphere.
CWE ID: 312Date
Published: Jan. 13, 2025, 8:15 p.m.
Last Modified: Jan. 13, 2025, 8:15 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
security-advisories@github.com
References
https://github.com/
security-advisories@github.com
https://github.com/
security-advisories@github.com