CVE-2019-19324

Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance

published March 20, 2020

CVSS
—
EPSS
1%
Percentile
62.9
In the wild
Unconfirmed
What it is

Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01015 · 62.9th percentile
Published
2020-03-20T17:26Z
EPSS history
Timeline
  • 20 MAR 17:26Z
    Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance
    cvelistv5