Authentication Bypass
Discription

firebase/php-jwt is vulnerable to Authentication Bypass. The vulnerability is due to missing algorithm checks when calling the decode method allowing attackers bypass verification when using asymmetric keys (RS256, RS384, RS512, ES256, ES384, ES512) when there is no algorithm specified within the…Read More

Back to Main

Subscribe for the latest news: