1 matches found
Json-jwt did not verify the cryptographic signature for data
The json-jwt rubygem version = 0.5.0 && 1.9.4 contains a CWE-347: Improper Verification of Cryptographic Signature vulnerability in Decryption of AES-GCM encrypted JSON Web Tokens that can result in Attacker can forge a authentication tag. This attack appear to be exploitable via network...
5.3CVSS5.6AI score0.00856EPSS
SaveExploits0References6Affected Software1
20