Published: 23/09/2022 Updated: 04/03/2023

CVSS v3 Base Score: 9.1 | Impact Score: 5.2 | Exploitability Score: 3.9

VMScore: 0

python-jwt is a module for generating and verifying JSON Web Tokens. Versions before 3.3.4 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass. An attacker who obtains a JWT can arbitrarily forge its contents without knowing the secret key. Depending on the application, this may for example enable the malicious user to spoof other user's identities, hijack their sessions, or bypass authentication. Users should upgrade to version 3.3.4. There are no known workarounds.

Vulnerable Product	Search on Vulmon	Subscribe to Product
python-jwt project python-jwt

Description The MITRE CVE dictionary describes this issue as: python-jwt is a module for generating and verifying JSON Web Tokens Versions prior to 334 are subject to Authentication Bypass by Spoofing, resulting in identity spoofing, session hijacking or authentication bypass An attacker who obtains a JWT can arbitrarily forge its content ...

A working POC found while doing a HTB challenge. Original: https://github.com/user0x1337/CVE-2022-39227

This repo belongs to githubcom/user0x1337/CVE-2022-39227 I just copy it

Python module for generating and verifying JSON Web Tokens

python-jwt    Module for generating and verifying JSON Web Tokens All versions of python-jwt are now DEPRECATED I don't have the time to maintain this module Note: Versions 334 and later fix a vulnerability (CVE-2022-39227) in JSON Web Token verification which lets an attacker with a valid token re-use its signature with modified claims

CVE-2022-39227 : Proof of Concept

CVE-2022-39227 CVE-2022-39227 : Proof of Concept Proof of concept for the CVE-2022-39227 According to this CVE, there is a flaw in the JSON Web Token verification It is possible with a valid token to re-use its signature with modified claims Required: A valid JWT Web Token The backend need to use the python library "python-jwt" in the version < 334 For

CWE-290 https://github.com/davedoesdev/python-jwt/commit/88ad9e67c53aa5f7c43ec4aa52ed34b7930068c9 https://github.com/davedoesdev/python-jwt/security/advisories/GHSA-5p8v-58qm-c7fp https://github.com/pypa/advisory-database/blob/main/vulns/python-jwt/PYSEC-2022-259.yaml https://nvd.nist.gov https://github.com/NoSpaceAvailable/CVE-2022-39227 https://access.redhat.com/security/cve/cve-2022-39227

CVE-2022-39227

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect