Description

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Validate JWS or JWT signature if it has Base64URL and dot safe string before executing JWS.verify() or JWS.verifyJWT() method.

Remediation

References

https://github.com/kjur/jsrsasign/releases/tag/10.5.25

https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897

https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41

Related Vulnerabilities

CVE-2018-15756 Vulnerability in maven package org.springframework:spring-web

CVE-2022-24762 Vulnerability in npm package sysend

CVE-2020-36179 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2017-16120 Vulnerability in npm package liyujing

CVE-2017-1000219 Vulnerability in npm package windows-cpu

Severity

Critical

Classification

CWE-347 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Release Notes Third Party Advisory Exploit Patch