CVE-2019-1010263

Source
https://nvd.nist.gov/vuln/detail/CVE-2019-1010263
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-1010263.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2019-1010263
Related
Published
2019-07-17T21:15:10Z
Modified
2025-01-08T10:20:34.485719Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Perl Crypt::JWT prior to 0.023 is affected by: Incorrect Access Control. The impact is: allow attackers to bypass authentication by providing a token by crafting with hmac(). The component is: JWT.pm, line 614. The attack vector is: network connectivity. The fixed version is: after commit b98a59b42ded9f9e51b2560410106207c2152d6c.

References

Affected packages

Git / github.com/dcit/perl-crypt-jwt

Affected ranges

Type
GIT
Repo
https://github.com/dcit/perl-crypt-jwt
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
Fixed

Affected versions

v0.*

v0.012
v0.013
v0.014
v0.015
v0.016
v0.017
v0.018
v0.019
v0.020
v0.021
v0.022