An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Identitymodel | Identitymodel_project | * | 1.3.0 (excluding) |
References
- https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
- https://github.com/scottbrady91/IdentityModel/issues/3
- https://github.com/scottbrady91/IdentityModel/issues/4
- https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
- https://github.com/scottbrady91/IdentityModel/issues/3
- https://github.com/scottbrady91/IdentityModel/issues/4