Broken User Authentication (BUA)

Since Host server is using the JKU field of the JWT without validating, attacker can tamper with the payload of JWT and access protected resources.

Hackers trick users to log into their account by forging requests, exploiting server authentication.

Since server is not validating the JWT signature the attacker can tamper with the payload of JWT and access protected resources

Since NONE Algorithm JWT is accepted by the server the attacker can tamper with the payload of JWT and access protected resources.

API doesn't validate the authenticity of token. Attacker can remove the auth token and access the endpoint.

Assessing the system's vulnerability by removing the CSRF token to determine if unauthorized actions can be performed.

Vulnerability assessment by replacing the CSRF token with an invalid one