CVE-2020-36255

2021-03-0503:15:12

Google

osv.dev

identitymodel

authentication

modification

AI Score

Confidence

High

EPSS

0.001

Percentile

32.6%

JSON

An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.

References

github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0

github.com/scottbrady91/IdentityModel/issues/3

github.com/scottbrady91/IdentityModel/issues/4