CVE-2019-1010263

2019-07-1721:15:10

Google

osv.dev

7.1 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

68.9%

JSON

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac(). The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit b98a59b42ded9f9e51b2560410106207c2152d6c.

CPENameOperatorVersion
perl-crypt-jwteq0.020
perl-crypt-jwteq0.022
perl-crypt-jwteq0.018
perl-crypt-jwteq0.019
perl-crypt-jwteq0.012
perl-crypt-jwteq0.014
perl-crypt-jwteq0.021
perl-crypt-jwteq0.015
perl-crypt-jwteq0.016
perl-crypt-jwteq0.017

Name	Operator	Version
perl-crypt-jwt	eq	0.020
perl-crypt-jwt	eq	0.022
perl-crypt-jwt	eq	0.018
perl-crypt-jwt	eq	0.019
perl-crypt-jwt	eq	0.012
perl-crypt-jwt	eq	0.014
perl-crypt-jwt	eq	0.021
perl-crypt-jwt	eq	0.015
perl-crypt-jwt	eq	0.016
perl-crypt-jwt	eq	0.017