JWT authentication bypass via X-HTTP-Method-Override
header
JWT authentication bypass via X-HTTP-Method-Override
header
github.com JWT authentication bypass via `X-HTTP-Method-Override` header
## Summary ESPv2 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases. ## Ba...
![JWT authentication bypass via `X-HTTP-Method-Override` header](https://lemmy.blahaj.zone/pictrs/image/PBrnf3f3R7.png?format=webp&thumbnail=256)
0
comments