Code injection

2017-10-1214:29:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.8%

JSON

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

CPENameOperatorVersion
jwt-scalale1.2.2

CPE	Name	Operator	Version
	jwt-scala	le	1.2.2

References

github.com/reallylabs/jwt-scala

jvn.jp/en/vu/JVNVU90916766/index.html