CVE-2021-31590

PwnDoc all versions until 0.4.0 (2021-08-23) has incorrect JSON Webtoken handling, leading to incorrect access control. With a valid JSON Webtoken that is used for authentication and authorization, a user can keep his admin privileges even if he is downgraded to the "user" privilege. Even after a user's account is deleted, the user can still access the administration panel (and add or delete users) and has complete access to the system.

• https://github.com/pwndoc/pwndoc/blob/59519735b0d831d8fd96d7c3387f66d28407e583/CHANGELOG.md#040-2021-08-23Patch, Release Notes, Third Party Advisory
• https://github.com/pwndoc/pwndoc/commit/15f3dc0e212eda465e05fda0feb002d1bce2939dPatch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/commit/ff1b868cec55f5b6c7a91e15a2b0b1f4324121abPatch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/pull/128Patch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/pull/74Patch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/security/advisoriesBroken Link
• https://www.dgc.org/responsible_disclosure_pwndoc_jwtExploit, Third Party Advisory
• https://github.com/pwndoc/pwndoc/blob/59519735b0d831d8fd96d7c3387f66d28407e583/CHANGELOG.md#040-2021-08-23Patch, Release Notes, Third Party Advisory
• https://github.com/pwndoc/pwndoc/commit/15f3dc0e212eda465e05fda0feb002d1bce2939dPatch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/commit/ff1b868cec55f5b6c7a91e15a2b0b1f4324121abPatch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/pull/128Patch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/pull/74Patch, Third Party Advisory
• https://github.com/pwndoc/pwndoc/security/advisoriesBroken Link
• https://www.dgc.org/responsible_disclosure_pwndoc_jwtExploit, Third Party Advisory

Published

Jul 19, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-31583Sipwise C5 NGCP WWW Admin version 3.6.7 up to and including …5.4
• CVE-2021-31584Sipwise C5 NGCP www_csc version 3.6.4 up to and including pl…8.8
• CVE-2021-31585Accellion Kiteworks before 7.3.1 allows a user with Admin pr…6.7
• CVE-2021-31586Accellion Kiteworks before 7.4.0 allows an authenticated use…8.8
• CVE-2021-31589A cross-site scripting (XSS) vulnerability has been reported…6.1
• CVE-2021-3159A stored cross site scripting (XSS) vulnerability in the /sy…5.4
• CVE-2021-31597The xmlhttprequest-ssl package before 1.6.1 for Node.js disa…9.4
• CVE-2021-31598An issue was discovered in libezxml.a in ezXML 0.8.6. The fu…7.5
• CVE-2021-31599An issue was discovered in Hitachi Vantara Pentaho through 9…8.8
• CVE-2021-3160Deserialization of untrusted data in the login page of ASSUW…9.8
• CVE-2021-31600An issue was discovered in Hitachi Vantara Pentaho through 9…4.3
• CVE-2021-31601An issue was discovered in Hitachi Vantara Pentaho through 9…6.5