CVE

Issuer field partial matches allowed in pyjwtpyjwt is a JSON Web Token implem...

pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being accepted for `"_abc_"`. This is a bug introduced in version ...

cybrmonkcybrmonk
Nov 29, 2024 - 22:30
 0  2
Issuer field partial matches allowed in pyjwtpyjwt is a JSON Web Token implem...
pyjwt is a JSON Web Token implementation in Python. An incorrect string comparison is run for `iss` checking, resulting in `"acb"` being accepted for `"_abc_"`. This is a bug introduced in version ...
Read More

Tags:

Previous Article

Cross-site Scripting in a field that is used in the Content name pattern in i...

Next Article

check-jsonschema default caching for remote schemas allows for cache confusio...

What's Your Reaction?

like

dislike

love

funny

angry

sad

wow

cybrmonk
cybrmonk

Related Posts

CWE-20: Improper Input Validation vulnerability exists that could cause a cra...

CWE-20: Improper Input Validation vulnerability exists ...

cybrmonk Oct 8, 2024  0  2

TopQuadrant TopBraid EDG before version 8.0.1 allows an authenticated attacke...

TopQuadrant TopBraid EDG before version 8.0.1 allows an...

cybrmonk Sep 27, 2024  0  0

WordPress BP Member Type Manager plugin <= 1.01 - Reflected Cross Site Script...

WordPress BP Member Type Manager plugin <= 1.01 - Refle...

cybrmonk Oct 29, 2024  0  2