high7.5
CVE-2020-36255
An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0.
Impact
An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Identitymodel Project | Identitymodel | before 1.3.0 |
References
- NVD record
- CVE.org record
- https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
- https://github.com/scottbrady91/IdentityModel/issues/3
- https://github.com/scottbrady91/IdentityModel/issues/4
- https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
- https://github.com/scottbrady91/IdentityModel/issues/3
- https://github.com/scottbrady91/IdentityModel/issues/4