Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2018/07/31 6:13 p.m.25 views

Json-jwt did not verify the cryptographic signature for data

The json-jwt rubygem version = 0.5.0 && 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network...

5.3CVSS5.6AI score0.00856EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder