Skip to content
Threat Feed
Subscribe

Tag

Jwt-Confusion

1 brief RSS
critical advisory

Omnivore API Authentication Bypass via JWT Algorithm Confusion

The Omnivore API improperly validates Apple sign-in tokens, allowing attackers to perform algorithm confusion attacks to bypass authentication and impersonate users.

Omnivore API authentication-bypass jwt-confusion web-vulnerability
1t 1c