Vulnerability Description
Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Strapi | Strapi | >= 3.0.0, < 4.6.0 |
Related Weaknesses (CWE)
References
- https://github.com/strapi/strapi/releasesRelease Notes
- https://strapi.io/blog/security-disclosure-of-vulnerabilities-cveExploitVendor Advisory
- https://www.ghostccamm.com/blog/multi_strapi_vulns/ExploitThird Party Advisory
- https://github.com/strapi/strapi/releasesRelease Notes
- https://strapi.io/blog/security-disclosure-of-vulnerabilities-cveExploitVendor Advisory
- https://www.ghostccamm.com/blog/multi_strapi_vulns/ExploitThird Party Advisory
FAQ
What is CVE-2023-22893?
CVE-2023-22893 is a vulnerability with a CVSS score of 7.5 (HIGH). Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that...
How severe is CVE-2023-22893?
CVE-2023-22893 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-22893?
Check the references section above for vendor advisories and patch information. Affected products include: Strapi Strapi.