CVE-2017-10862

Published October 12th, 2017

View on NVD ↗

CVSS v3

N/A

CVSS v2

MEDIUM

Affected

PROJECT

Description

jwt-scala 1.2.2 and earlier fails to verify token signatures correctly which may lead to an attacker being able to pass specially crafted JWT data as a correctly signed token.

reallylabs/jwt-scala

JSON Web Token (JWT) Scala implementation

GitHub