CVE-2020-36255

CVE-2020-36255

EPSS 1.5%

An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0 https://github.com/scottbrady91/IdentityModel/issues/3 https://github.com/scottbrady91/IdentityModel/issues/4