Lucene search
+L

3 matches found

OSV
OSV
added 2021/04/13 3:22 p.m.67 views

GHSA-7MPX-VG3C-CMR4 Improper Authentication in react-adal

This affects versions of react-adal 0.5.1. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly validated, causing the application to treat an attacker-generated JWT token as authentic. The logical defect is caused by h...

8.2CVSS7.9AI score0.01282EPSS
SaveExploits1References4
Rows per page
Query Builder