Lucene search

Improper Input Validation

🗓️ 23 Dec 2022 05:31:35Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 74 Views

jsonwebtoken improper input validation vulnerability allow remote attacker to write arbitrary files

Reporter	Title	Published	Views	Family All 25
OSV	jsonwebtoken has insecure input validation in jwt.verify function	22 Dec 202203:31	–	osv
NVD	CVE-2022-23529	21 Dec 202221:15	–	nvd
Tenable Nessus	Auth0 JsonWebtoken < 9.0.0 Arbitrary File Write (deprecated)	13 Jan 202300:00	–	nessus
Cvelist	CVE-2022-23529	1 Jan 197600:00	–	cvelist
GithubExploit	Exploit for CVE-2022-23529	16 Jan 202302:35	–	githubexploit
GithubExploit	Exploit for CVE-2022-23529	16 Jan 202302:35	–	githubexploit
RedhatCVE	CVE-2022-23529	11 Jan 202305:35	–	redhatcve
Hive Pro Threat Advisories	New Vulnerability Found in the JsonWebToken Open-Source Project	10 Jan 202312:11	–	hivepro
CVE	CVE-2022-23529	21 Dec 202221:15	–	cve
The Hacker News	Severe Security Flaw Found in "jsonwebtoken" Library Used by 22,000+ Projects	10 Jan 202308:54	–	thn

Vulners

Node

jsonwebtokenRange≤8.5.1

jsonwebtokenRange≤7.1.0

Source	Link
github	www.github.com/auth0/node-jsonwebtoken/commit/e1fa9dcc12054a8681db4e6373da1b30cf7016e3
github	www.github.com/auth0/node-jsonwebtoken
github	www.github.com/auth0/node-jsonwebtoken/releases/tag/v9.0.0
github	www.github.com/auth0/node-jsonwebtoken/security/advisories/GHSA-27h2-hvpr-p74q

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

23 Dec 2022 05:35Current

3.2Low risk

Vulners AI Score3.2