Files
CVEs-PoC/2021/CVE-2021-27306.md
2025-09-29 21:09:30 +02:00

738 B

CVE-2021-27306

Description

An improper access control vulnerability in the JWT plugin in Kong Gateway prior to 2.3.2.0 allows unauthenticated users access to authenticated routes without a valid token JWT.

POC

Reference

Github