Description

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Validate JWS or JWT signature if it has Base64URL and dot safe string before executing JWS.verify() or JWS.verifyJWT() method.

Remediation

References

https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41

https://github.com/kjur/jsrsasign/releases/tag/10.5.25

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896

https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122

Related Vulnerabilities

CVE-2021-37713 Vulnerability in npm package tar

CVE-2023-40028 Vulnerability in npm package ghost

CVE-2010-10006 Vulnerability in maven package org.expressme:jopenid

CVE-2020-15092 Vulnerability in npm package @knight-lab/timelinejs

CVE-2022-35204 Vulnerability in maven package org.webjars.npm:vite

Severity

Critical

Classification

CWE-347 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Patch Third Party Advisory Release Notes Exploit