CISA's KEV entry for the WSO2 flaw describes a different vulnerability
KEV says path traversal and file upload. Everyone else — including CISA’s own CWE field — says JWT signature bypass.
KEV says path traversal and file upload. Everyone else — including CISA’s own CWE field — says JWT signature bypass.