CVE-2021-31590

Public Exploit

Description

PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. With a valid JSON Webtoken that is used for authentication and authorization, a user can keep his admin privileges even if he is downgraded to the "user" privilege. Even after a user's account is deleted, the user can still access the administration panel (and add or delete users) and has complete access to the system.

8.8

CVSS

Severity: High

CVSS 3.1 •

CVSS 2.0 •

EPSS 1.49% Top 20%

Third-Party Advisory github.com Third-Party Advisory github.com Third-Party Advisory github.com Third-Party Advisory github.com Third-Party Advisory github.com Third-Party Advisory dgc.org

Affected: n/a n/a

References

Link	Tags
https://github.com/pwndoc/pwndoc/security/advisories	broken link
https://github.com/pwndoc/pwndoc/pull/128	third party advisory patch
https://github.com/pwndoc/pwndoc/pull/74	third party advisory patch
https://www.dgc.org/responsible_disclosure_pwndoc_jwt	third party advisory exploit
https://github.com/pwndoc/pwndoc/blob/59519735b0d831d8fd96d7c3387f66d28407e583/CHANGELOG.md#040-2021-08-23	release notes third party advisory patch
https://github.com/pwndoc/pwndoc/commit/15f3dc0e212eda465e05fda0feb002d1bce2939d	third party advisory patch
https://github.com/pwndoc/pwndoc/commit/ff1b868cec55f5b6c7a91e15a2b0b1f4324121ab	third party advisory patch

Frequently Asked Questions

What is the severity of CVE-2021-31590?: CVE-2021-31590 has been scored as a high severity vulnerability.
How to fix CVE-2021-31590?: To fix CVE-2021-31590, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2021-31590 being actively exploited in the wild?: It is possible that CVE-2021-31590 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~1% probability that this vulnerability will be exploited by malicious actors in the next 30 days.

This platform uses data from the NIST NVD, MITRE CVE, MITRE CWE, First.org and CISA KEV but is not endorsed or certified by these entities. CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site.