cdbattags lua-resty-jwt 0.2.3 allows attackers to bypass all JWT-parsing signature checks by crafting a JWT with an enc header with the value A256GCM.
References
Configurations
No configuration.
History
No history.
Information
Published : 2024-04-24 06:15
Updated : 2024-11-21 09:17
NVD link : CVE-2024-33531
Mitre link : CVE-2024-33531
CVE.ORG link : CVE-2024-33531
JSON object : View
Products Affected
No product.
CWE
CWE-290
Authentication Bypass by Spoofing