Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
added 2021/09/29 5:9 p.m.34 views

File reference keys leads to incorrect hashes on HMAC algorithms

Impact Users of HMAC-based algorithms HS256, HS384, and HS512 combined with Lcobucci\JWT\Signer\Key\LocalFileReference as key are having their tokens issued/validated using the file path as hashing key - instead of the contents. The HMAC hashing functions take any string as input and, since users...

4.4CVSS1.7AI score0.00205EPSS
SaveExploits0References6Affected Software1
Rows per page
Query Builder