Vulnerabilityhigh
Researchers Find Security Flaw in JsonWebToken Library Used By 20,000+ Projects
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-23529 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER | — | — |
From the original article
1 min read at infosecurity-magazine.com
A new high-severity vulnerability has been found in the popular JsonWebToken open-source JavaScript package. By exploiting the flaw, an attacker could perform remote code execution (RCE) on a server verifying a maliciously crafted JSON web token (JWT) request, explained Palo Alto Networks in a Monday advisory .
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.