Vulnerabilities > ORY > Hydra > 1.0.6

DATE CVE VULNERABILITY TITLE RISK
2020-04-06 CVE-2020-5300 Authentication Bypass by Capture-replay vulnerability in ORY Hydra
In Hydra (an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go), before version 1.4.0+oryOS.17, when using client authentication method 'private_key_jwt' [1], OpenId specification says the following about assertion `jti`: "A unique identifier for the token, which can be used to prevent reuse of the token.
network
high complexity
ory CWE-294
5.3
5.3