Lucene search
+L

1 matches found

OSV
OSV
added 2024/02/29 1:42 a.m.11 views

UBUNTU-CVE-2023-51774

The json-jwt aka JSON::JWT gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode...

8.4CVSS5.8AI score0.00233EPSS
SaveExploits1References3
Rows per page
Query Builder