JWT Misconfiguration (Web)

मेटाडेटा हेरफेर, जैसे कि JSON वेब टोकन के साथ फिर से खेलना या छेड़छाड़ करना

Access control enforces policy such that users cannot act outside of their intended permissions. Failures typically lead to unauthorized information disclosure, modification or destruction of all data, or performing a business function outside of the limits of the user. Common access control vulnerabilities include:

Metadata manipulation, such as replaying or tampering with a JSON Web Token (JWT) access control token or a cookie or hidden field manipulated to elevate privileges, or abusing JWT invalidation.