Executive brief
Uniqueness of JWT IDs (jti) are not checked, allowing the JWT to be replayed.
Affected products
- Go github.com/ory/fosite
Junglewise Threat Intelligence
GO-2021-0092 - Uniqueness of JWT IDs (jti) are not checked, allowing the JWT to be replayed.
Severity: info ยท Published 2021-04-14
Technologies: github.com/ory/fosite (Go). Vendors: Go.