#jwt
-
Critical WSO2 API Manager Vulnerability Allowing Admin-Token Forgery Is Already Being Exploited
Researchers at watchTowr have observed active attacks against WSO2 API Manager: attackers bypass JWT validation and gain administrator privileges. The vulnerability has been assigned the maximum severity rating.