Aller au contenu
en Se connecter
5.3 Moyenne

CVE-2026-81829 A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed…

Description

A flaw was found in SmallRye JWT's AwsAlbKeyResolver, which is used by applications to verify JSON Web Tokens signed by AWS Application Load Balancers. When the AWS_ALB key provider is configured, the resolver constructs the key-fetch URL by directly concatenating the attacker-controlled kid header value from an inbound JWT without sanitizing path traversal characters or query-string separators. This allows an unauthenticated remote attacker to force the application server to issue GET requests to arbitrary paths on the same origin as the configured key endpoint. As a result, non-public endpoints or internal data reachable on that origin may be read by the attacker before JWT signature verification takes place.

Produits et versions touchés

Produit Versions touchées Corrigé en
Exploit Intelligence Versions non publiées
Red Hat build of Apicurio Registry 3 Versions non publiées
Red Hat build of Quarkus Versions non publiées
Red Hat JBoss Enterprise Application Platform 8 Versions non publiées
Red Hat JBoss Enterprise Application Platform Expansion Pack Versions non publiées
Red Hat build of Quarkus 3.27.5.SP2 Versions non publiées
Red Hat build of Quarkus 3.33.3.SP2 Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Exploit Intelligence

Les 29 CVE de Exploit Intelligence →
CVE-2026-121837 Quarkus-rest-data-panache: quarkus-rest-data-panache: getter-level @securefield ignored for filter and sort 4.3 Moyenne CVE-2026-107912 Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw 7.7 Élevée CVE-2026-114236 storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a… 3.3 Faible CVE-2026-87744 A flaw was found in Quarkus REST Data Panache 9.1 Critique
Suivre cette CVE