CVE-2020-28042

Name of the Vulnerable Software and Affected Versions ServiceStack versions prior to 5.9.2

Description The issue is related to the mishandling of JWT signature verification. This occurs unless an application has a custom ValidateToken function that establishes a valid minimum length for a signature.

Recommendations For versions prior to 5.9.2, update to version 5.9.2 or later to resolve the issue. As a temporary workaround, consider implementing a custom ValidateToken function that establishes a valid minimum length for a signature to mitigate the risk of exploitation.