CVE-2023-51774.yml

---
gem: json-jwt
cve: 2023-51774
ghsa: c8v6-786g-vjx6
url: https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
title: json-jwt allows bypass of identity checks via a sign/encryption confusion attack
date: 2024-02-29
description: |
  The json-jwt (aka JSON::JWT) gem versions 1.16.5 and below sometimes allows
  bypass of identity checks via a sign/encryption confusion attack.
  For example, JWE can sometimes be used to bypass JSON::JWT.decode.
patched_versions:
  - "~> 1.15.3, >= 1.15.3.1"
  - ">= 1.16.6"
related:
  url:
    - https://nvd.nist.gov/vuln/detail/CVE-2023-51774
    - https://github.com/P3ngu1nW/CVE_Request/blob/main/novjson-jwt.md
    - https://github.com/advisories/GHSA-c8v6-786g-vjx6
# no CVSS score yet. advisory was published before version 1.16.4 was released.
# versions 1.16.4 and 1.16.5 do not seem patched.