• caglararli@hotmail.com
  • 05386281520

CVE-2024-37568 | Authlib up to 1.3.0 Asymmetric Public Key jwt.decode Privilege Escalation (Issue 654)

Çağlar Arlı      -    57 Views

CVE-2024-37568 | Authlib up to 1.3.0 Asymmetric Public Key jwt.decode Privilege Escalation (Issue 654)

A vulnerability was found in Authlib up to 1.3.0. It has been classified as problematic. This affects the function jwt.decode of the component Asymmetric Public Key Handler. The manipulation leads to Privilege Escalation. This vulnerability is uniquely identified as CVE-2024-37568. The attack needs to be initiated within the local network. There is no exploit available. It is recommended to upgrade the affected component.