Detections
Analytics

SCA: security update for fast-jwt (GHSA-c2ff-88x2-x9pg)

medium Tenable Self-Hosted Container Security Plugin ID 413580

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - fast-jwt provides fast JSON Web Token (JWT) implementation. Prior to version 3.3.2, the fast-jwt library
 does not properly prevent JWT algorithm confusion for all public key types. The 'publicKeyPemMatcher' in
 'fast-jwt/src/crypto.js' does not properly match all common PEM formats for public keys. To exploit this
 vulnerability, an attacker needs to craft a malicious JWT token containing the HS256 algorithm, signed
 with the public RSA key of the victim application. This attack will only work if the victim application
 utilizes a public key containing the `BEGIN RSA PUBLIC KEY` header. Applications using the RS256
 algorithm, a public key with a `BEGIN RSA PUBLIC KEY` header, and calling the verify function without
 explicitly providing an algorithm, are vulnerable to this algorithm confusion attack which allows
 attackers to sign arbitrary payloads which will be accepted by the verifier. Version 3.3.2 contains a
 patch for this issue. As a workaround, change line 29 of `blob/master/src/crypto.js` to include a regular
 expression. (CVE-2023-48223)

See Also

https://github.com/advisories/GHSA-c2ff-88x2-x9pg

Plugin Details

Severity: Medium

ID: 413580

Version: Revision 1.4

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 5

Percentile: 94.38

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5.4

Temporal Score: 4.2

Vector: CVSS2#AV:N/AC:H/Au:N/C:N/I:C/A:N

CVSS Score Source: CVE-2023-48223

CVSS v3

Risk Factor: Medium

Base Score: 5.9

Temporal Score: 5.3

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 11/20/2023

Vulnerability Publication Date: 11/20/2023

Reference Information

CVE: CVE-2023-48223

cwe: CWE-20