It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication. Weiterlesen: USN-9059-1: ruby-jwt vulnerability
Intelligence View
⚡ tsecurity.de Intelligence
USN-9059-1: ruby-jwt vulnerability
It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this…
Intelligence Digest — kostenlos Täglich die wichtigsten Security-News · jederzeit abbestellbar