Send a JWT with an incorrect signature, the endpoint might respond with an error disclosing the correct one.
jwt-dotnet/jwt: Critical Security Fix Required: You disclose the correct signature with each SignatureVerificationException... #61arrow-up-right
CVE-2019-7644: Security Vulnerability in Auth0-WCF-Service-JWTarrow-up-right
Last updated 1 year ago