CVE-2023-48396
Last modified
CVE-2023-48396 is a critical-severity vulnerability rated 9.1/10 on the CVSS scale. Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user. Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version 1.0.1, which fixes the issue.. EPSS estimates a 0.72% chance of exploitation in the next 30 days.
Description
Web Authentication vulnerability in Apache SeaTunnel. Since the jwt key is hardcoded in the application, an attacker can forge any token to log in any user. Attacker can get secret key in /seatunnel-server/seatunnel-app/src/main/resources/application.yml and then create a token. This issue affects Apache SeaTunnel: 1.0.0. Users are recommended to upgrade to version 1.0.1, which fixes the issue.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apache | Seatunnel | 1.0.0 |
References
- http://www.openwall.com/lists/oss-security/2024/07/30/1Mailing List, Third Party Advisory
- https://lists.apache.org/thread/1tdxfjksx0vb9gtyt77wlr6rdcy1qwmwMailing List, Vendor Advisory
- http://www.openwall.com/lists/oss-security/2024/07/30/1Mailing List, Third Party Advisory
- https://lists.apache.org/thread/1tdxfjksx0vb9gtyt77wlr6rdcy1qwmwMailing List, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-48396?
How severe is CVE-2023-48396?
How do I fix CVE-2023-48396?
How Strix Helps
- Same Subject, Wrong User: A Cross-Issuer Account Takeover in n8nStrix found an identity-binding bug in n8n's token-exchange flow enabling account takeover.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-4839The WP Go Maps for WordPress is vulnerable to Stored Cross-S…4.8
- CVE-2023-48390Multisuns EasyLog web+ has a code injection vulnerability. A…9.8
- CVE-2023-48392Kaifa Technology WebITR is an online attendance system, it h…9.8
- CVE-2023-48393Kaifa Technology WebITR is an online attendance system. A re…4.3
- CVE-2023-48394Kaifa Technology WebITR is an online attendance system, its …8.8
- CVE-2023-48395Kaifa Technology WebITR is an online attendance system, it h…6.5
- CVE-2023-48397In Init of protocolcalladapter.cpp, there is a possible out …4.9
- CVE-2023-48398In ProtocolNetAcBarringInfo::ProtocolNetAcBarringInfo() of p…7.5
- CVE-2023-48399In ProtocolMiscATCommandAdapter::Init() of protocolmiscadapt…5.5
- CVE-2023-4840The MapPress Maps for WordPress plugin for WordPress is vuln…5.4
- CVE-2023-48401In GetSizeOfEenlRecords of protocoladapter.cpp, there is a p…5.5
- CVE-2023-48402In ppcfw_enable of ppcfw.c, there is a possible EoP due to a…7.8
Are you affected by CVE-2023-48396?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST