Description

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Validate JWS or JWT signature if it has Base64URL and dot safe string before executing JWS.verify() or JWS.verifyJWT() method.

Remediation

References

https://github.com/kjur/jsrsasign/releases/tag/10.5.25

https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897

https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41

Related Vulnerabilities

CVE-2018-1338 Vulnerability in maven package org.apache.tika:tika-parsers

CVE-2021-21353 Vulnerability in npm package pug

CVE-2022-24431 Vulnerability in npm package abacus-ext-cmdline

CVE-2016-5725 Vulnerability in maven package com.jcraft:jsch

CVE-2020-7785 Vulnerability in npm package node-ps

Severity

Critical

Classification

CWE-347 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Release Notes Third Party Advisory Exploit Patch