CVE-2022-25898

CriticalCVSS 9.8/10Last modified Jun 22, 2026

Description

The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or number escaped characters may be validated as valid by mistake. Workaround: Validate JWS or JWT signature if it has Base64URL and dot safe string before executing JWS.verify() or JWS.verifyJWT() method.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-347

Affected software

Vendor	Product	Versions
n/a	jsrsasign	>= unspecified, < 10.5.25

References

https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41Patch, Third Party Advisory
https://github.com/kjur/jsrsasign/releases/tag/10.5.25Release Notes, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898Exploit, Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897Exploit, Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896Exploit, Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122Exploit, Patch, Third Party Advisory
https://github.com/kjur/jsrsasign/commit/4536a6e9e8bcf1a644ab7c07ed96e453347dae41Patch, Third Party Advisory
https://github.com/kjur/jsrsasign/releases/tag/10.5.25Release Notes, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWER-2935898Exploit, Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSBOWERGITHUBKJUR-2935897Exploit, Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-2935896Exploit, Patch, Third Party Advisory
https://snyk.io/vuln/SNYK-JS-JSRSASIGN-2869122Exploit, Patch, Third Party Advisory

Timeline

Published: Jul 1, 2022
Last modified: Jun 22, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-258999.8Authentication bypass for the Open AMT Cloud Toolkit software maintained by Intel(R) before versions 2.0.2 and 2.2.2 may allow an unauthenti CVE-2022-25907.0A race condition was found in the way the Linux kernel's memory subsystem handled the copy-on-write (COW) breakage of private read-only shar CVE-2022-259009.8All versions of package git-clone are vulnerable to Command Injection due to insecure usage of the --upload-pack feature of git.CVE-2022-259017.5Versions of the package cookiejar before 2.1.4 are vulnerable to Regular Expression Denial of Service (ReDoS) via the Cookie.parse function,CVE-2022-259037.5The package opcua from 0.0.0 are vulnerable to Denial of Service (DoS) via the ExtensionObjects and Variants objects, when it allows unlimit CVE-2022-259049.8All versions of package safe-eval are vulnerable to Prototype Pollution which allows an attacker to add or modify properties of the Object.p CVE-2022-259057.3Uncontrolled search path element in the Intel(R) oneAPI Data Analytics Library (oneDAL) before version 2021.5 for Intel(R) oneAPI Base Toolk CVE-2022-259067.8All versions of the package is-http2 are vulnerable to Command Injection due to missing input sanitization or other checks, and sandboxes be CVE-2022-259079.8The package ts-deepmerge before 2.0.2 are vulnerable to Prototype Pollution due to missing sanitization of the merge function.CVE-2022-259089.8All versions of the package create-choo-electron are vulnerable to Command Injection via the devInstall function due to improper user-input CVE-2022-25917.5A vulnerability classified as critical has been found in TEM FLEX-1085 1.6.0. Affected is an unknown function of the file /sistema/flash/reb CVE-2022-259129.8The package simple-git before 3.15.0 are vulnerable to Remote Code Execution (RCE) when enabling the ext transport protocol, which makes it