writeups.xyz / Playing with JSON Web Tokens for Fun and Profit

Submitter : c2a

Date: 4 April 2020

Bounty : undisclosed

Vulnerabilities :

• Password Reset
• Email Verification Bypass

Programs :

• Undisclosed

Authors :

• Muhammad Qasim Munir (@MeetAn0nym0us)

Link :
https://blog.securitybreached.org/2020/04/04/playing-with-json-web-tokens-for-fun-and-profit/