Jwt

A JWT that accepted the none algorithm, so an unsigned token with a tampered claim sailed through.

SSTI leaked the values needed to forge a JWT, and pyjwt’s default algorithm set let the public key double as an HMAC secret.

The JWT signing secret was exposed, so I forged a token that smuggled an eval payload into the username array.