Lucene search

K
osvGoogleOSV:GO-2021-0110
HistoryJul 28, 2021 - 6:08 p.m.

Token reuse in github.com/ory/fosite

2021-07-2818:08:05
Google
osv.dev
22
token reuse
jwt ids
uniqueness
replay vulnerability
fosite software

AI Score

8

Confidence

High

EPSS

0.002

Percentile

61.6%

Uniqueness of JWT IDs (jti) are not checked, allowing the JWT to be replayed.

AI Score

8

Confidence

High

EPSS

0.002

Percentile

61.6%

Related for OSV:GO-2021-0110