Non notée
CVE-2016-5431 The PHP JOSE Library by Gree Inc
Description
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| jose-php | Versions non publiées |