Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2018/11/09 5:50 p.m.28 views

Exposure of Sensitive information in authentikat-jwt

A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt aka com.jason-goodwin/authentikat-jwt version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature b...

9.8CVSS3.7AI score0.02EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder