{"id":"CVE-2018-0114","aliases":["EUVD-2022-4353","GHSA-jfxm-w8g2-4rcv"],"status":"published","title":"Cisco node-jose improper validation of JWT signature","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.42651,"percentile":0.9872,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-347"],"published":"2018-01-04T06:00:00Z","modified":"2026-10-20T10:49:38Z","exploits":[{"source":"exploitdb","id":"EDB-44324","title":"Cisco node-jos \u003c 0.11.0 - Re-sign Tokens","type":"webapps","platform":"multiple","date":"2018-03-20","url":"https://www.exploit-db.com/exploits/44324"},{"source":"pocgithub","id":"Eremiel/CVE-2018-0114","title":"Eremiel/CVE-2018-0114","date":"2021-01-03","url":"https://github.com/Eremiel/CVE-2018-0114"},{"source":"pocgithub","id":"Logeirs/CVE-2018-0114","title":"Logeirs/CVE-2018-0114","date":"2020-08-18","url":"https://github.com/Logeirs/CVE-2018-0114"},{"source":"pocgithub","id":"Pandora-research/CVE-2018-0114-Exploit","title":"Pandora-research/CVE-2018-0114-Exploit","date":"2022-09-26","url":"https://github.com/Pandora-research/CVE-2018-0114-Exploit"},{"source":"pocgithub","id":"Starry-lord/CVE-2018-0114","title":"Starry-lord/CVE-2018-0114","date":"2021-01-13","url":"https://github.com/Starry-lord/CVE-2018-0114"},{"source":"pocgithub","id":"adityathebe/POC-CVE-2018-0114","title":"adityathebe/POC-CVE-2018-0114","date":"2020-12-20","url":"https://github.com/adityathebe/POC-CVE-2018-0114"},{"source":"pocgithub","id":"amr9k8/jwt-spoof-tool","title":"amr9k8/jwt-spoof-tool","date":"2023-03-16","url":"https://github.com/amr9k8/jwt-spoof-tool"},{"source":"pocgithub","id":"fevra-dev/ClaimJumper","title":"fevra-dev/ClaimJumper","date":"2026-01-16","url":"https://github.com/fevra-dev/ClaimJumper"},{"source":"pocgithub","id":"j4k0m/CVE-2018-0114","title":"j4k0m/CVE-2018-0114","date":"2021-09-03","url":"https://github.com/j4k0m/CVE-2018-0114"},{"source":"pocgithub","id":"mmeza-developer/CVE-2018-0114","title":"mmeza-developer/CVE-2018-0114","date":"2021-11-06","url":"https://github.com/mmeza-developer/CVE-2018-0114"},{"source":"pocgithub","id":"n0m-d/CVE-2018-0114-Go","title":"n0m-d/CVE-2018-0114-Go","date":"2025-08-14","url":"https://github.com/n0m-d/CVE-2018-0114-Go"},{"source":"pocgithub","id":"scumdestroy/CVE-2018-0114","title":"scumdestroy/CVE-2018-0114","date":"2021-05-11","url":"https://github.com/scumdestroy/CVE-2018-0114"},{"source":"pocgithub","id":"sealldeveloper/CVE-2018-0114-PoC","title":"sealldeveloper/CVE-2018-0114-PoC","date":"2025-04-25","url":"https://github.com/sealldeveloper/CVE-2018-0114-PoC"},{"source":"pocgithub","id":"z-bool/Venom-JWT","title":"z-bool/Venom-JWT","date":"2025-01-27","url":"https://github.com/z-bool/Venom-JWT"},{"source":"pocgithub","id":"zi0Black/POC-CVE-2018-0114","title":"zi0Black/POC-CVE-2018-0114","date":"2018-03-20","url":"https://github.com/zi0Black/POC-CVE-2018-0114"}],"fixes":[{"ecosystem":"npm","package":"node-jose","fixed_in":["0.11.0"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"npm","package":"node-jose","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.11.0"}]}]},{"source":"osv","ecosystem":"npm","package":"node-jose","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.11.0"}]}]}],"products":[{"vendor":"cisco","product":"node-jose"}],"references":[{"url":"https://tools.cisco.com/security/center/viewAlert.x?alertId=56326","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix","web"]},{"url":"https://github.com/zi0Black/POC-CVE-2018-0114","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence","web"]},{"url":"https://github.com/cisco/node-jose/blob/master/CHANGELOG.md","tags":["x_refsource_CONFIRM","x_transferred","Release Notes","Third Party Advisory","advisory","web"]},{"url":"https://www.exploit-db.com/exploits/44324/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securityfocus.com/bid/102445","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-0114","tags":["advisory"]},{"url":"https://web.archive.org/web/20210124130907/http://www.securityfocus.com/bid/102445","tags":["web"]},{"url":"https://github.com/advisories/GHSA-jfxm-w8g2-4rcv"},{"url":"https://github.com/cisco/node-jose","tags":["package"]},{"url":"https://www.exploit-db.com/exploits/44324","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2018-0114","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","status":"published","published":"2018-01-04T06:00:00Z","modified":"2024-12-02T20:58:29.226Z","cwes":["CWE-347"],"updated_at":"2026-11-02T14:35:12.160284Z"}],"euvd":[{"id":"EUVD-2022-4353","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","status":"published","published":"2018-01-04T06:00:00Z","modified":"2024-12-02T20:58:29Z","updated_at":"2026-11-03T00:04:43.118962Z"}],"ghsa":[{"id":"GHSA-jfxm-w8g2-4rcv","title":"Cisco node-jose improper validation of JWT signature","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","status":"published","published":"2022-05-13T01:17:32Z","modified":"2023-10-14T05:03:23Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:37:08.847568Z"}],"nvd":[{"id":"CVE-2018-0114","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","status":"published","published":"2018-01-04T06:29:00.417Z","modified":"2026-06-17T01:29:35.55Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T14:04:22.309028Z"}],"osv":[{"id":"CVE-2018-0114","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","status":"published","published":"2018-01-04T06:29:00.417Z","modified":"2026-10-20T10:49:38.601859193Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:07.192756Z"},{"id":"GHSA-jfxm-w8g2-4rcv","title":"Cisco node-jose improper validation of JWT signature","description":"A vulnerability in the Cisco node-jose open source library before 0.11.0 could allow an unauthenticated, remote attacker to re-sign tokens using a key that is embedded within the token. The vulnerability is due to node-jose following the JSON Web Signature (JWS) standard for JSON Web Tokens (JWTs). This standard specifies that a JSON Web Key (JWK) representing a public key can be embedded within the header of a JWS. This public key is then trusted for verification. An attacker could exploit this by forging valid JWS objects by removing the original signature, adding a new public key to the header, and then signing the object using the (attacker-owned) private key associated with the public key embedded in that JWS header.","status":"published","published":"2022-05-13T01:17:32Z","modified":"2023-11-08T03:59:30.230514Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"cwes":["CWE-347"],"updated_at":"2026-11-02T15:46:50.336262Z"}]}}