A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token.
Metrics
Affected Vendors & Products
References
History
Tue, 09 Jun 2026 18:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A lack of cryptographic signature verification in the validateAccessToken function of bookcars v8.3 allows attackers to bypass authentication via a forged JWT token. | |
| References |
|
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2026-06-09T18:13:10.752Z
Reserved: 2026-04-06T00:00:00.000Z
Link: CVE-2026-36721
No data.
Status : Deferred
Published: 2026-06-09T19:17:42.500
Modified: 2026-06-09T19:35:05.693
Link: CVE-2026-36721
No data.
OpenCVE Enrichment
No data.