CVE Vulnerability

CVE-2021-31590

PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. With a valid JSON Webtoken that is used for authentication and authorization, a user can keep his admin privileges even if he is downgraded to the "user" privilege. Even after a user's account is deleted, the user can still access the administration panel (and add or delete users) and has complete access to the system.

9 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8 / Impact : 10

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

Scope

8.8 /10

CVSS v3.0 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://github.com/pwndoc/pwndoc/security/advisories Broken Link
https://github.com/pwndoc/pwndoc/pull/128 Patch Third Party Advisory
https://github.com/pwndoc/pwndoc/pull/74 Patch Third Party Advisory
https://www.dgc.org/responsible_disclosure_pwndoc_jwt Exploit Third Party Advisory
https://github.com/pwndoc/pwndoc/commit/15f3dc0e212eda465e05fda0feb002d1bce2939d Patch Third Party Advisory
https://github.com/pwndoc/pwndoc/commit/ff1b868cec55f5b6c7a91e15a2b0b1f4324121ab Patch Third Party Advisory
https://github.com/pwndoc/pwndoc/blob/59519735b0d831d8fd96d7c3387f66d28407e583/CHANGELOG.md#040-2021-08-23 Patch Release Notes
Configurations

Configuration 1

cpe:2.3:a:pwndoc_project:pwndoc:*:*:*:*:*:*:*:*
Information

Published : 2021-07-19 08:15

Updated : 2022-07-12 05:42

NVD link : CVE-2021-31590

Mitre link : CVE-2021-31590

Products Affected
No products.
CWE
NVD-CWE-Other