CVE-2023-22495

CRITICAL 9.8CVE-2023-22495 · Published 14/01/2023 · updated 17/06/2026

In short

CVE-2023-22495 is a CRITICAL (CVSS 9.8) vulnerability affecting izanami (maif).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 67.9% of all vulnerabilities.
Fix: update to 1.11.0 or later.

Package	Affected versions	Patched versions
izanami maif	`< 1.11.0`	`1.11.0`

Description

Izanami is a shared configuration service well-suited for micro-service architecture implementation. Attackers can bypass the authentication in this application when deployed using the official Docker image. Because a hard coded secret is used to sign the authentication token (JWT), an attacker could compromise another instance of Izanami. This issue has been patched in version 1.11.0.

References

MAIF/izanami release v1.11.0 · Release Notes
MAIF/izanami security advisory · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free