CVE-2018-0114
40Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 43%
from disclosure to weapon75 days
Published on NVDJan 4
1st PoC+75d
exploitation probability
43%top 1% of all CVEs
observed exploitation
nono source reports it
16 public exploit(s)
A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.
Affected products
n/a · Node-jose Librarypublic PoCs found — 16
exploitdbwww.exploit-db.com/exploits/44324unverifiedgithubgithub.com/z-bool/Venom-JWT★ 290githubgithub.com/zi0Black/POC-CVE-2018-0114★ 26githubgithub.com/j4k0m/CVE-2018-0114★ 4githubgithub.com/scumdestroy/CVE-2018-0114★ 3githubgithub.com/Eremiel/CVE-2018-0114★ 2githubgithub.com/fevra-dev/ClaimJumper★ 1githubgithub.com/adityathebe/POC-CVE-2018-0114★ 1githubgithub.com/Pandora-research/CVE-2018-0114-Exploit★ 0githubgithub.com/mmeza-developer/CVE-2018-0114★ 0githubgithub.com/Starry-lord/CVE-2018-0114★ 0githubgithub.com/n0m-d/CVE-2018-0114-Go★ 0githubgithub.com/Logeirs/CVE-2018-0114★ 0githubgithub.com/amr9k8/jwt-spoof-tool★ 0githubgithub.com/sealldeveloper/CVE-2018-0114-PoC★ 0cve_referencewww.exploit-db.com/exploits/44324/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.