Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Missing Token Replay Detection in 2.X #711

Closed
AndersAbel opened this issue May 9, 2017 · 0 comments
Closed

Missing Token Replay Detection in 2.X #711

AndersAbel opened this issue May 9, 2017 · 0 comments
Labels
bug security enhancement
Milestone
v2.5.0

Comments

@AndersAbel
Copy link
Member

AndersAbel commented May 9, 2017 •
edited

Token Replay detection was not properly implemented in the migration to .Net Core.

The security implications are described in: GHSA-g6j2-ch25-5mmv and published as CVE-2020-5261
@AndersAbel AndersAbel changed the title Reserved Issue Reserved Issue# May 9, 2017
@Sustainsys Sustainsys locked and limited conversation to collaborators Sep 6, 2018
@AndersAbel AndersAbel reopened this Mar 24, 2020
@AndersAbel AndersAbel added this to the v2.5.0 milestone Mar 24, 2020
@AndersAbel AndersAbel changed the title Reserved Issue# Missing Token Replay Detection in 2.X Mar 24, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Assignees
No one assigned
Labels
bug security enhancement
Projects
None yet
Milestone
v2.5.0
Development

No branches or pull requests
1 participant
@AndersAbel