Lucene search
+L
Perl Crypt::jwt ProjectPerl Crypt::jwt

1 matches found

CVE
CVE
added 2019/07/17 8:32 p.m.59 views

CVE-2019-1010263

The CVE-2019-1010263 entry concerns Perl Crypt::JWT prior to 0.023, with an Incorrect Access Control flaw in JWT.pm (line 614) that allows an attacker to bypass authentication by crafting a token using hmac(). The attack vector is network connectivity, and the issue is fixed in the commit b98a59b...

9.8CVSS9.6AI score0.01312EPSS
Save