Description
NAMSHI | JOSE 5.0.0 and earlier allows remote attackers to bypass signature verification via crafted tokens in a JSON Web Tokens (JWT) header.
References
- JVN#25336719 third-party-advisory
- 75423 vdb-entry
- JVNDB-2015-000090 third-party-advisory