1.1.8, 1.1.9</li><li>1.2, 1.2.1</li></ul><h2 id=impact-score>Impact score</h2><p>Overall CVSS score: 7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C">AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:F/RL:O/RC:C</a></p><h2 id=vulnerability-impact-and-detection>Vulnerability impact and Detection</h2><p>Envoy is vulnerable if the following two conditions are satisfied:</p><ul><li>A JWT authentication policy is applied to it.</li><li>The JWT issuer