JWT Null Signature

Severity	High
CVEs	CVE-2020-28042
Classifications	CWE-327: Use of a Broken or Risky Cryptographic Algorithm
OWASP Category	OWASP API2:2023 Broken Authentication

The "JWT Null Signature" vulnerability occurs when a JSON Web Token (JWT) lacks a signature part, allowing attackers to manipulate the token's content potentially leading to unauthorized access and data tampering.

Example

TODO: write an example

How to test?

TODO: VulnAPI Command

What is the impact?

TODO: write the impact

How to remediate?

TODO: write the remediation