11 matches found
EUVD-2019-8947
Malware in sbrugna...
CVE-2019-19324
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
Unspecified Vulnerability in Xmidt cjwt
Xmidt cjwt is a JSON network token implementation written in C . A security vulnerability exists in Xmidt cjwt 1.0.1 and earlier versions prior to 2019-11-25 that can be exploited by an attacker to cause an untrusted and unexpected JWT acceptance...
CVE-2019-19324
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
CVE-2019-19324
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
Design/Logic Flaw
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
CVE-2019-19324
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
CVE-2019-19324
Xmidt cjwt (C library) before 2019-11-25 and version 1.0.1 and earlier maps unsupported JWT algorithms to alg=none, which can lead to untrusted accidental JWT acceptance. Affected component: Xmidt cjwt; root cause: permissive/incorrect handling of algorithm values; impact: potential for accepting...
CVE-2019-19324
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...
PT-2020-10135
Name of the Vulnerable Software and Affected Versions Xmidt cjwt versions 1.0.1 and earlier Description The issue arises when Xmidt cjwt maps unsupported algorithms to alg=none, which can lead to the accidental acceptance of untrusted JWTs. This occurs because the mapping sometimes results in...
CVE-2019-19324: Always-Incorrect Control Flow Implementation
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance...