Description

AWS Cognito login provider of Strapi is vulnerable to an authentication bypass vulnerability due to a lack of JWT signature verification. It allows unauthenticated users to compromise the system.

Remediation

Upgrade to the latest version of Strapi

References

Security Disclosure of Vulnerabilities: CVE-2023-22893, CVE-2023-22621, and CVE-2023-22894

Multiple Critical Vulnerabilities in Strapi Versions <=4.7.1

Related Vulnerabilities

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (3.4.8)

WordPress Plugin The Events Calendar Security Bypass (3.11.2)

WordPress Plugin WP Private Content Plus Security Bypass (1.31)

WordPress Plugin Klarna Checkout for WooCommerce Security Bypass (2.0.9)

WordPress Plugin MailUp newsletter sign-up form Security Bypass (1.3.2)

Severity

High

Classification

CVE-2023-22893 CWE-287 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Authentication Bypass