CVE-2020-15957

CVE-2020-15957 affects DP3T-Backend-SDK before 1.1.1. When configured to check JWTs before uploading/publishing keys, an attacker can bypass the signature check by supplying a JWT with alg=none, enabling potential unauthorized key publishing or forgery. The connected documents confirm the same de...