5 matches found
acryl-datahub missing JWT signature check
Missing JWT signature check GHSL-2022-078The StatelessTokenService of the DataHub metadata service GMS does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadata Service authentication is enabled. This vulnerability occurs because...
9.9CVSS7.2AI score0.00908EPSS
SaveExploits1References9Affected Software1
20