Description

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Validate JWS or JWT signature if it has Base64URL and dot safe string before executing JWS.verify() or JWS.verifyJWT() method.

Remediation

References

https://github.com/kjur/jsrsasign/releases/tag/10.5.25

https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896

https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897

https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41

Related Vulnerabilities

CVE-2023-6378 Vulnerability in maven package ch.qos.logback:logback-classic

CVE-2020-7758 Vulnerability in npm package browserless-chrome

CVE-2018-1262 Vulnerability in maven package org.cloudfoundry.identity:cloudfoundry-identity-uaa

CVE-2017-16182 Vulnerability in npm package serverxxx

CVE-2023-25805 Vulnerability in npm package versionn

Severity

Critical

Classification

CWE-347 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Release Notes Third Party Advisory Exploit Patch