CVE-2022-39227

This repository contains a functional proof-of-concept exploit for CVE-2022-39227, which involves a JWT signature verification flaw in the python-jwt library versions < 3.3.4. The exploit allows an attacker to reuse a valid JWT signature with modified claims, effectively bypassing authentication.

This repository contains a functional proof-of-concept exploit for CVE-2022-39227, which exploits a flaw in the python-jwt library (< 3.3.4) allowing JWT signature reuse with modified claims. The PoC takes a valid JWT token and injects arbitrary claims while retaining the original signature.