Vulnerabilities > CVE-2019-19324 - Always-Incorrect Control Flow Implementation vulnerability in Xmidt Cjwt 1.0.1
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
NONE Integrity impact
PARTIAL Availability impact
NONE Summary
Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |