RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign

Description

Jsrsasign supports RSA PKCS#1 v1.5 (i.e. RSAES-PKCS1-v1_5) and RSA-OAEP encryption and decryption. Its encrypted message is represented as BigInteger. When there is a valid encrypted message, a crafted message with prepending zeros can be decrypted by this vulnerability.

Recommendation

Update the jsrsasign package to the latest compatible version. Followings are version details:

Affected version(s): < 8.0.18
Patched version(s): 8.0.18

References

GHSA-xxxq-chmp-67g4
cve.mitre.org
kjur.github.io
vuldb.com
www.npmjs.com
security.netapp.com
CVE-2020-14967
CWE-119
CAPEC-310
OWASP 2021-A6

Could your website be exposed too?

SmartScanner can check your website for RSA PKCS#1 decryption vulnerability with prepending zeros in jsrsasign and gives you actionable findings to investigate.

Start a free scan

Related Issues

RSA-PSS signature validation vulnerability by prepending zeros in jsrsasign - CVE-2020-14968
RSA signature validation vulnerability on maleable encoded message in jsrsasign - CVE-2021-30246
ECDSA signature validation vulnerability by accepting wrong ASN.1 encoding in jsrsasign - CVE-2020-14966
Marvin Attack of RSA and RSAOAEP decryption in jsrsasign - CVE-2024-21484

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

See something that needs correcting? Let us knowUpdated January 31, 2023