← Back to CVE List

CVE-2023-31580

Published: 2023-10-25T18:17Z
Last Modified: 2024-11-21T08:02Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
light-oauth2 before version 2.1.27 obtains the public key without any verification. This could allow attackers to authenticate to the application with a crafted JWT token. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt