InfoSec Blog

tags Archives

BAC

ServiceStack JWT signature verification bypass

By zi0black

02/11/2020

Re-discovering a JWT Authentication Bypass in ServiceStack

ServiceStack in version 5.9.2 almost silently patched a vulnerability which allowed to bypass JWT signature.

Read more

ServiceStack JWT Exploit BAC

2

Min