CVE-2016-5431
EUVD-2022-581907.08.2019, 15:15
The PHP JOSE Library by Gree Inc. before version 2.2.1 is vulnerable to key confusion/algorithm substitution in the JWS component resulting in bypassing the signature verification via crafted tokens.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| php_jose_project | php_jose | 𝑥 < 2.2.1 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration