writeups.xyz / ASP.NET Boilerplate Multiple Vulnerabilities

Submitter : c2a

Date: 26 August 2022

Bounty : undisclosed

Vulnerabilities :

• Broken Authentication
• Hardcoded Credentials
• JWT
• Padding Oracle Attack
• Cryptographic Issues

Programs :

• Volosoft (ASP.NET Boilerplate)

Authors :

• Sana Oshika (@Bigshika)

Link :
https://pulsesecurity.co.nz/advisories/aspnetboilerplate-jwt