CVE-2021-47663

Description

Due to improper JSON Web Tokens implementation an unauthenticated remote attacker can guess a valid session ID and therefore impersonate a user to gain full access.

Affected Platforms

Weakness Type

CWE-613

References

• https://www.sciencedirect.com/science/article/pii/S2351978921001657