USN-9059-1: ruby-jwt vulnerability

It was discovered that ruby-jwt incorrectly verified HMAC signatures when the verification key was empty or missing. A remote attacker could possibly use this issue to forge tokens and bypass authentication.

Quelle: Originalartikel öffnen