writeups.xyz / JWT Refresh Token Manipulation

Submitter : c2a

Date: 16 November 2017

Bounty : undisclosed

Vulnerabilities :

• JWT
• Authentication Bypass
• Account Takeover

Programs :

• Undisclosed

Authors :

• Mikail Tunç (@Emtunc)

Link :
https://emtunc.org/blog/11/2017/jwt-refresh-token-manipulation/