JWT authentication bypass via 'X-HTTP-Method-Override' Header

ESPv2 contains an authentication bypass vulnerability. API clients can craft a malicious X-HTTP-Method-Override header value to bypass JWT authentication in specific cases.
Reference: github.com/Goo...
.
.
.
.
.
Like and Subscribe :)
Social media:
Twitter: / medusa_0xf
Blog:
/ medusa0xf
#api #bugbounty #twitter #vulnerability #postman ostman #pentesting #api #hack #bola #tryhackme #hackerone #apihacking #computerscience #javascript #python #postman #ctf #bughunting #pentesting #hacking #hackingtools #burpsuite #portswigger #ethicalhacking #OAuth #webhacking #programming #websecurity #technology #practical #artificialintelligence #web #recon #bypass