Strapi does not verify the access or ID tokens issued during the OAuth flow

高 7.5CVE-2023-22893 · GHSA-583x-23h9-f5w7 · 19/04/2023 公開 · 17/06/2026 更新

要点

CVE-2023-22893 は strapi (strapi), @strapi/plugin-users-permissions に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：4.1%（全脆弱性の 90.8% より高い）。
対処：4.6.0 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
strapi strapi	`≥ 3.0.0, < 4.6.0`	`4.6.0`
@strapi/plugin-users-permissions npm	`≥ 3.2.1, < 4.6.0`	`4.6.0`

概要

Strapi 3.2.1 until 4.6.0 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication.

NVD の説明

Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication.