021-001</h1><p>JWT authentication can be bypassed when AuthorizationPolicy is misused.</p></div><p class=post-author>Mar 1, 2021</p><div><table><thead><tr><th colspan=2>Disclosure Details</th></tr></thead><tbody><tr><td>CVE(s)</td><td><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21378">CVE-2021-21378</a><br></td></tr><tr><td>CVSS Impact Score</td><td>8.2 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV%3aN%2fAC%3aL%2fPR%3aN%2fUI%3aN%2fS%3aU%2fC%3aH%2fI%3aL%2fA%3aN&