Web Application Vulnerabilities Index

This page lists X vulnerabilities classified as CWE-347 that can be detected by Invicti.

Vulnerability Name
Classification
Severity
JWT Forgery via Chaining Jku Parameter with Open Redirect
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
, 
CWE-347
, 
OWASP 2017-A2
, 
High
Weak Secret is Used to Sign JWT
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
, 
CWE-347
, 
OWASP 2017-A2
, 
High