CVE-2020-36255

CVE-2020-36255 describes a critical vulnerability in IdentityModel (ScottBrady.IdentityModel) versions prior to 1.3.0, specifically within its Branca implementation. This flaw permits an unauthenticated attacker to modify and forge authentication tokens, potentially leading to unauthorized access or privilege escalation. With a CVSS score of 7.5 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, impacting integrity without requiring user interaction. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.