{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1550.001 Application Access Token","home_page_url":"https://patchfirst.co/technique/T1550.001/","feed_url":"https://patchfirst.co/feed/technique/T1550.001.json","description":"New and newly exploited CVEs that lead to ATT&CK T1550.001 Application Access Token, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2018-15801","url":"https://patchfirst.co/cve/CVE-2018-15801/","title":"CVE-2018-15801: Authorization Bypass During JWT Issuer Validation with spring-security","content_text":"Spring by Pivotal · Spring Security. Not in CISA KEV. EPSS 0.7% (higher than 51.2% of CVEs). CVSS 3.3 LOW. ATT&CK: T1550.001 Application Access Token. Priority 12.6 of 100.","summary":"Authorization Bypass During JWT Issuer Validation with spring-security","date_published":"2018-12-19T00:00:00.000Z","date_modified":"2024-09-16T18:43:45.000Z","tags":["T1550.001"],"_patchfirst":{"reason":"published","priority":12.6,"kev":null,"epss":{"score":0.00653,"percentile":0.51244},"cvss":{"score":3.3,"severity":"LOW","version":"3.0"},"vendor":"Spring by Pivotal","product":"Spring Security","techniqueIds":["T1550.001"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}