Vulnerability Details CVE-2020-36255
An issue was discovered in IdentityModel (aka ScottBrady.IdentityModel) before 1.3.0. The Branca implementation allows an attacker to modify and forge authentication tokens.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 62.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
- https://github.com/scottbrady91/IdentityModel/issues/3
- https://github.com/scottbrady91/IdentityModel/issues/4
- https://github.com/scottbrady91/IdentityModel/compare/1.2.0...1.3.0
- https://github.com/scottbrady91/IdentityModel/issues/3
- https://github.com/scottbrady91/IdentityModel/issues/4
Products affected by CVE-2020-36255
-
cpe:2.3:a:identitymodel_project:identitymodel:*