Search
Find a vulnerability
Search criteria
2 vulnerabilities by ulrikstrid
CVE-2023-23928 (GCVE-0-2023-23928)
Vulnerability from nvd – Published: 2023-02-01 00:59 – Updated: 2025-03-10 21:17
VLAI
Title
reason-jose ignores signature checks
Summary
reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass. Applications relying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has been patched in version 0.8.2.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/ulrikstrid/reason-jose/securit… | x_refsource_CONFIRM |
| https://github.com/ulrikstrid/reason-jose/commit/… | x_refsource_MISC |
| https://github.com/ulrikstrid/reason-jose/release… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| ulrikstrid | reason-jose |
Affected:
< 0.8.2
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T10:42:27.106Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-23928",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-10T20:58:40.955622Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-10T21:17:19.894Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "reason-jose",
"vendor": "ulrikstrid",
"versions": [
{
"status": "affected",
"version": "\u003c 0.8.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass. Applications relying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has been patched in version 0.8.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347: Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-01T00:59:38.475Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2"
}
],
"source": {
"advisory": "GHSA-7jj9-6qwv-wpm7",
"discovery": "UNKNOWN"
},
"title": "reason-jose ignores signature checks"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-23928",
"datePublished": "2023-02-01T00:59:38.475Z",
"dateReserved": "2023-01-19T21:12:31.359Z",
"dateUpdated": "2025-03-10T21:17:19.894Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2023-23928 (GCVE-0-2023-23928)
Vulnerability from cvelistv5 – Published: 2023-02-01 00:59 – Updated: 2025-03-10 21:17
VLAI
Title
reason-jose ignores signature checks
Summary
reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass. Applications relying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has been patched in version 0.8.2.
Severity
5.9 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- CWE-347 - Improper Verification of Cryptographic Signature
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://github.com/ulrikstrid/reason-jose/securit… | x_refsource_CONFIRM |
| https://github.com/ulrikstrid/reason-jose/commit/… | x_refsource_MISC |
| https://github.com/ulrikstrid/reason-jose/release… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| ulrikstrid | reason-jose |
Affected:
< 0.8.2
|
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T10:42:27.106Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7",
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2",
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2"
}
],
"title": "CVE Program Container"
},
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-23928",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-10T20:58:40.955622Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-10T21:17:19.894Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "reason-jose",
"vendor": "ulrikstrid",
"versions": [
{
"status": "affected",
"version": "\u003c 0.8.2"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. This allows tampering of JWS header and payload data if the service does not perform additional checks. Such tampering could expose applications using reason-jose to authorization bypass. Applications relying on JWS claims assertion to enforce security boundaries may be vulnerable to privilege escalation. This issue has been patched in version 0.8.2."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-347",
"description": "CWE-347: Improper Verification of Cryptographic Signature",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2023-02-01T00:59:38.475Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/ulrikstrid/reason-jose/security/advisories/GHSA-7jj9-6qwv-wpm7"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ulrikstrid/reason-jose/commit/36cd724db3cbec121757624da49072386bd869e5"
},
{
"name": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/ulrikstrid/reason-jose/releases/tag/v0.8.2"
}
],
"source": {
"advisory": "GHSA-7jj9-6qwv-wpm7",
"discovery": "UNKNOWN"
},
"title": "reason-jose ignores signature checks"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2023-23928",
"datePublished": "2023-02-01T00:59:38.475Z",
"dateReserved": "2023-01-19T21:12:31.359Z",
"dateUpdated": "2025-03-10T21:17:19.894Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}