Lucene search
+L

5 matches found

PyPA
PyPA
•added 2026/06/29 11:50 a.m.•15 views

acryl-datahub missing JWT signature check

Missing JWT signature check GHSL-2022-078The StatelessTokenService of the DataHub metadata service GMS does not verify the signature of JWT tokens. This allows an attacker to connect to DataHub instances as any user if Metadata Service authentication is enabled. This vulnerability occurs because...

9.9CVSS7.2AI score0.00908EPSS
SaveExploits1References9Affected Software1
Rows per page
Query Builder