Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The verify function in Encryption/Symmetric.php in Malcolm Fell jwt before 1.0.3 does not use a timing-safe function for hash comparison, which allows attackers to spoof signatures via a timing attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Malcolm Fell jwt 安全漏洞
Vulnerability Description
Malcolm Fell jwt是一个用于PHP中的JSON Web Token（JWT）方案的实现。 Malcolm Fell jwt 1.0.2及之前的版本中的Encryption/Symmetric.php文件的‘verify’函数存在安全漏洞。攻击者可利用该漏洞伪造签名。
CVSS Information
N/A
Vulnerability Type
N/A