Skip Navigation

JWT authentication bypass via X-HTTP-Method-Override header

github.com JWT authentication bypass via `X-HTTP-Method-Override` header

## Summary ESPv2 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases. ## Ba...

0
0 comments