2015-06-05 10:00:00
jpcert
PUBLISHED
JWT.php in F21 JWT before 2.0 allows remote attackers to bypass signature verification via crafted tokens.