2 matches found
Linux Distros Unpatched Vulnerability : CVE-2020-26160
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for maud which is allowed by the specification...
7.5CVSS6.3AI score0.02158EPSS
SaveExploits0References2
DEBIAN-CVE-2020-26160
jwt-go before 4.0.0-preview1 allows attackers to bypass intended access restrictions in situations with string for m"aud" which is allowed by the specification. Because the type assertion fails, "" is the value of aud. This is a security problem if the JWT token is presented to a service that lac...
7.5CVSS6.3AI score0.02158EPSS
SaveExploits0References1
20