CVE-2023-51774
published 2024-02-29CVE-2023-51774: The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can…
PriorityP340high8.4CVSS 3.1
AVLACLPRNUINSUCHIHAH
EPSS
0.23%
14.2th percentile
The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| json-jwt_project | json-jwt | — | — |
| json-jwt_project | json-jwt | >= 0 < 1.15.3.1 | 1.15.3.1 |
| json-jwt_project | json-jwt | >= 1.16.0 < 1.16.6 | 1.16.6 |
CVSS provenance
nvdv3.18.4HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
osv8.4HIGH
vendor_redhat8.4HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
json-jwt: bypass of identity checks via a sign/encryption confusion attack
vendor_redhat·2024-02-29·CVSS 8.4
CVE-2023-51774 [HIGH] json-jwt: bypass of identity checks via a sign/encryption confusion attack
json-jwt: bypass of identity checks via a sign/encryption confusion attack
The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.
Package: openshift-logging/fluentd-rhel8 (Logging Subsystem for Red Hat OpenShift) - Not affected
GHSA
json-jwt allows bypass of identity checks via a sign/encryption confusion attack
ghsa·2024-02-29
CVE-2023-51774 [MEDIUM] json-jwt allows bypass of identity checks via a sign/encryption confusion attack
json-jwt allows bypass of identity checks via a sign/encryption confusion attack
The json-jwt (aka JSON::JWT) gem 1.16.x before 1.16.6, 1.15.x before 1.15.3.1 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.
OSV
CVE-2023-51774: The json-jwt (aka JSON::JWT) gem 1
osv·2024-02-29·CVSS 8.4
CVE-2023-51774 [HIGH] CVE-2023-51774: The json-jwt (aka JSON::JWT) gem 1
The json-jwt (aka JSON::JWT) gem 1.16.3 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.
OSV
json-jwt allows bypass of identity checks via a sign/encryption confusion attack
osv·2024-02-29
CVE-2023-51774 [MEDIUM] json-jwt allows bypass of identity checks via a sign/encryption confusion attack
json-jwt allows bypass of identity checks via a sign/encryption confusion attack
The json-jwt (aka JSON::JWT) gem 1.16.x before 1.16.6, 1.15.x before 1.15.3.1 for Ruby sometimes allows bypass of identity checks via a sign/encryption confusion attack. For example, JWE can sometimes be used to bypass JSON::JWT.decode.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-02-29
Published