Skip to content
OpenAdvisories

Archive

1 November 2020

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium —
    CVE-2020-28042 Public exploit

    Signature validation bypass in ServiceStack

    ServiceStack before 5.9.2 mishandles JWT signature verification unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.