JWT Scan Rule

Home/Alerts/Alert detail/

Solution: See reference for further information. The solution depends on implementation details

References: https://cheatsheetseries.owasp.org/cheatsheets/JSON_Web_Token_Cheat_Sheet_for_Java.html

Latest Security News

NCA Busts Russian Crypto Networks Laundering Funds and Evading Sanctions

CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanel

White House: Salt Typhoon hacked telcos in dozens of countries

FBI shares tips on how to tackle AI-powered fraud schemes

BT unit took servers offline after Black Basta ransomware breach

New DroidBot Android malware targets 77 banking, crypto apps

Common Alerts

Latest CVE List

CVE-2024-51378 CyberPanel Incorrect Default Permissions Vulnerability

CVE-2023-45727 North Grid Proself Improper Restriction of XML External Entity (XEE) Reference Vulnerability

CVE-2024-11680 ProjectSend Improper Authentication Vulnerability

CVE-2024-11667 Zyxel Multiple Firewalls Path Traversal Vulnerability

CVE-2023-28461 Array Networks AG and vxAG ArrayOS Missing Authentication for Critical Function Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

Top CWE List

CWE-15 External Control of System or Configuration Setting

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-1426 Improper Validation of Generative AI Output

CWE-236 Improper Handling of Undefined Parameters

Free security scan for your website

Don't show website scan report rating on the leaderboard