GHSA-j868-6x23-744qMedium
The extension fails to properly validate the expiration of a client-supplied JWT token, allowing...
🔗 CVE IDs covered (1)
📋 Description
The extension fails to properly validate the expiration of a client-supplied JWT token, allowing an attacker in control of a valid API key to authenticate with an expired token. Exploitation requires the attacker to already be in control of the SYSSY project's API key.