CVE-2023-53951
CRITICALEver Gauzy 0.281.9 - JWT Authentication Bypass via Weak HMAC Secret
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2023-53951. PoCs published by nu11secur1ty.
AI-analyzed exploit summary This exploit demonstrates a JWT weak HMAC secret vulnerability in ever gauzy v0.281.9, allowing an attacker to authenticate using a well-known HMAC secret key. The provided JWT token can be used to bypass authentication and perform malicious actions.
Description
Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.
Exploits (1)
This exploit demonstrates a JWT weak HMAC secret vulnerability in ever gauzy v0.281.9, allowing an attacker to authenticate using a well-known HMAC secret key. The provided JWT token can be used to bypass authentication and perform malicious actions.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H