GitHub Advisoryadvisory · Maven

GHSA-9pxm-8g95-q5xr Insufficient Data Verification in io.really:jwt-scala

MEDIUM Published 2022-05-17 Modified 2022-11-01 Official page ↗
Aliases
CVE-2017-10862
Ecosystem
Maven
Packages
io.really:jwt-scala
Severity
Moderate
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weaknesses
CWE-345
Reviewed
2022-11-01

Affected packages

• Maven io.really:jwt-scala: <= 1.2.2 (no fix yet)

Description

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

Related

Alias · CVE (1)

  • CVE-2017-10862 jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted… vulnerability

Weakness · CWE (1)

  • CWE-345 Insufficient Verification of Data Authenticity weakness

References