3 matches found
GHSA-7MPX-VG3C-CMR4 Improper Authentication in react-adal
This affects versions of react-adal 0.5.1. It is possible for a specially crafted JWT token and request URL can cause the nonce, session and refresh values to be incorrectly validated, causing the application to treat an attacker-generated JWT token as authentic. The logical defect is caused by h...
8.2CVSS7.9AI score0.01282EPSS
SaveExploits1References4
20