Lucene search
+L

1 matches found

OSV
OSV
added 2018/11/09 5:50 p.m.8 views

GHSA-3RHM-67J6-42JQ Exposure of Sensitive information in authentikat-jwt

A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt aka com.jason-goodwin/authentikat-jwt version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature b...

9.8CVSS5.9AI score0.02EPSS
SaveExploits0References6
Rows per page
Query Builder