Security-X
Forum Security-X => News => Discussion démarrée par: igor51 le janvier 10, 2023, 20:04:23
-
Popular JWT cloud security library patches “remote” code execution hole
It's remotely triggerable, but attackers would already have pretty deep network access if they could "prime" your server for compromise.
Source: Popular JWT cloud security library patches “remote” code execution hole (https://nakedsecurity.sophos.com/2023/01/10/popular-jwt-cloud-security-library-patches-remote-code-execution-hole/)