CVE-2021-31590

HIGH

pwndoc < 0.4.0 - Incorrect Access Control via JSON Webtoken Handling

Title source: llm
STIX 2.1

Description

PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. With a valid JSON Webtoken that is used for authentication and authorization, a user can keep his admin privileges even if he is downgraded to the "user" privilege. Even after a user's account is deleted, the user can still access the administration panel (and add or delete users) and has complete access to the system.

References (7)

Core 7
Core References
Patch, Third Party Advisory x_refsource_misc
https://github.com/pwndoc/pwndoc/pull/128
Patch, Third Party Advisory x_refsource_misc
https://github.com/pwndoc/pwndoc/pull/74
Exploit, Third Party Advisory x_refsource_misc
https://www.dgc.org/responsible_disclosure_pwndoc_jwt

Scores

CVSS v3 8.8
EPSS 0.0265
EPSS Percentile 83.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

Status published
Products (1)
pwndoc_project/pwndoc < 0.4.0
Published Jul 19, 2021
Tracked Since Feb 18, 2026