← Back

Dp3t Backend Software Development Kit Project

dp3t-backend-software_development_kit_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dp3t Backend Software Development Kit Project
1Dp3t Backend Software Development Kit
Nov 21, 2024
Jul 30, 2020
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T). When it is configured to check JWT before uploading/publishing keys, it is possible to skip the sign...Show more
An issue was discovered in DP3T-Backend-SDK before 1.1.1 for Decentralised Privacy-Preserving Proximity Tracing (DP3T). When it is configured to check JWT before uploading/publishing keys, it is possible to skip the signature check by providing a JWT token with alg=none.Show less