CVE-2018-1000531
HIGHprime-jwt < 1.3.0 - JWT Signature Validation Bypass via 'none' Algorithm
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2018-1000531. PoCs published by realbatuhan, dawetmaster, andikahilmy.
AI-analyzed exploit summary This repository contains a Python-based JWT bruteforcer that tests for CVE-2018-1000531, an algorithm confusion vulnerability allowing authentication bypass by setting the 'alg' header to 'none'. It also includes a brute-force component for cracking JWT secrets.
Description
inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token. This attack can be exploitable when an attacker crafts a JWT token with a valid header using 'none' as algorithm and a body to requests it be validated. This vulnerability was fixed after commit abb0d479389a2509f939452a6767dc424bb5e6ba.
Exploits (3)
This repository contains a Python-based JWT bruteforcer that tests for CVE-2018-1000531, an algorithm confusion vulnerability allowing authentication bypass by setting the 'alg' header to 'none'. It also includes a brute-force component for cracking JWT secrets.
This repository contains a vulnerable version of the Prime JWT library (1.3.0) that demonstrates CVE-2018-1000531, an authentication bypass vulnerability due to improper handling of the 'none' algorithm in JWT verification. The code includes functional JWT encoding/decoding logic, including support for HMAC and RSA signing, but lacks proper validation for unsecured tokens.
This repository contains a vulnerable version of the Prime JWT library (1.3.0) that demonstrates CVE-2018-1000531, an authentication bypass vulnerability due to improper handling of the 'none' algorithm in JWT verification. The code includes functional JWT encoding/decoding logic, including support for HMAC and RSA signing, but lacks proper validation for unsecured tokens.
References (1)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N