The Null-Signature Trap: Unmasking the 10.0 CVSS Authentication Bypass in pac4j-jwt
A critical vulnerability has been unearthed within the widely utilized Java authentication library, pac4j-jwt, empowering a malicious actor to masquerade as any system user, administrators included. This severe flaw has been designated the identifier...
