Signature validation bypass in ServiceStack

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature...

CVE-2020-28042

ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature...

PT-2020-16905

Name of the Vulnerable Software and Affected Versions ServiceStack versions prior to 5.9.2 Description The issue is related to the mishandling of JWT signature verification. This occurs unless an application has a custom ValidateToken function that establishes a valid minimum length for a...