Interesting JWT vulnerability. bhavukjain.com/blog/2020/05/…
4
7
2
27
This has almost nothing to do with JWTs, or even OpenID Connect for that matter.
1
2
Yep, I realized that after I posted and made a clarifying post in the thread, which you should have saw?
1
Replying to @JGamblin
I should have replied to that one. It’s barely a logic bug using JWT. I’m writing up more details in a blog post, will post a link shortly.

May 31, 2020 · 6:11 PM UTC

1
Replying to @aaronpk
Ok... what would you call it then?
2
lack of form validation
1