pentester.land· Feb 3, 2023· by Raphaël Lob🔍 CVE-2023-22495

Authentication Bypass in Izanami Docker image 1.10.22 CVE-2023-22495

Target Program: Izanami

🎯 Vulnerability: OAuth 2.0 / JWT Authentication Bypass

💡 Defense Fix: Strictly verify JWT signatures on the backend, enforce state parameter validation, and reject 'alg: none'.

#Authentication bypass#JWT#Security code review#Container security#CVE-2023-22495