CVE-2015-2951

JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens...

PT-2015-5999

Name of the Vulnerable Software and Affected Versions F21 JWT versions prior to 2.0 Description The issue allows remote attackers to bypass signature verification via crafted tokens. Recommendations For versions prior to 2.0, update to version 2.0 or later to resolve the issue...

CVE-2015-2951: Improper Input Validation

JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens...

JVN#06120222: F21 JWT fails to verify token signatures

JWT provided by F21 is a PHP library for handling JSON Web Tokens. JWT contains a vulnerability where it fails to verify token signatures. Impact Specially crafted tokens may be validated as token data with valid signatures. Solution Update the Software Update to the latest version according to t...