Skip to content
Threat Feed
Subscribe

Product

Omnivore API (< Abf53d6)

1 brief RSS
critical advisory

Omnivore API Authentication Bypass via JWT Algorithm Confusion

The Omnivore API improperly validates Apple sign-in tokens, allowing attackers to perform algorithm confusion attacks to bypass authentication and impersonate users.

Omnivore API authentication-bypass jwt-confusion web-vulnerability
1t 1c