0xCBE@infosec.pub to

Red Team@infosec.pub • 1 year ago

JWT authentication bypass via `X-HTTP-Method-Override` header

2

JWT authentication bypass via `X-HTTP-Method-Override` header

0xCBE@infosec.pub to

Red Team@infosec.pub • 1 year ago

## Summary ESPv2 contains an authentication bypass vulnerability. API clients can craft a malicious `X-HTTP-Method-Override` header value to bypass JWT authentication in specific cases. ## Ba...

You must log in or register to comment.

Chat

Red Team@infosec.pub

redteam@infosec.pub

You are not logged in. However you can subscribe from another Fediverse account, for example Lemmy or Mastodon. To do this, paste the following into the search field of your instance: !redteam@infosec.pub

Red Teamers are here to break into your stuff before the bad guys do, and help you secure it. This is a place to discuss novel research, pentest tools and techniques, physical security and post memes about the Blue Team.

Join us! We have cookies. Blue Team's cookies. >:)

Visibility: Public

This community can be federated to other instances and be posted/commented in by their users.

1 user / day
1 user / week
1 user / month
1 user / 6 months
2 local subscribers
443 subscribers
6 Posts
0 Comments
Modlog

mods:
administrator@infosec.pub