Disclosing a New Vulnerability in JWT Secret Poisoning (CVE-2022-23529) | allinfosecnews.com

Jan. 9, 2023, 2 p.m. | Artur Oleyarsh

Unit42 unit42.paloaltonetworks.com

We discovered a new high-severity vulnerability (CVE-2022-23529) in the popular JsonWebToken open source project.

The post Disclosing a New Vulnerability in JWT Secret Poisoning (CVE-2022-23529) appeared first on Unit 42.

cloud cve cve-2022-23529 exploit high jsonwebtoken jwt open source poisoning popular prisma cloud project remote code execution secret severity unit 42 vulnerability vulnerability exploitation

More from unit42.paloaltonetworks.com / Unit42

Threat Brief: Operation MidnightEclipse, Post-Exploitation Activity Related to CVE-2024-3400 1 week, 4 days ago | unit42.paloaltonetworks.com

campaign command command injection cve +13

Muddled Libra’s Evolution to the Cloud 2 weeks ago | unit42.paloaltonetworks.com

amp applications att aws +17

It Was Not Me! Malware-Initiated Vulnerability Scanning Is on the Rise 2 weeks, 1 day ago | unit42.paloaltonetworks.com

advanced threat prevention advanced url filtering advanced wildfire attacks +14

Threat Brief: Vulnerability in XZ Utils Data Compression Library Impacting Multiple Linux Distributions (CVE-2024-3094) 3 weeks, 3 days ago | unit42.paloaltonetworks.com

compression cortex xdr cortex xsiam cve +17

Exposing a New BOLA Vulnerability in Grafana 3 weeks, 6 days ago | unit42.paloaltonetworks.com

advanced url filtering api api attacks authorization +19

ASEAN Entities in the Spotlight: Chinese APT Group Targeting 4 weeks ago | unit42.paloaltonetworks.com

actions advanced persistent threat advanced url filtering apac +20

Large-Scale StrelaStealer Campaign in Early 2024 1 month ago | unit42.paloaltonetworks.com

advanced threat protection advanced wildfire campaign campaigns +16

Curious Serpens’ FalseFont Backdoor: Technical Analysis, Detection and Prevention 1 month ago | unit42.paloaltonetworks.com

advanced threat prevention advanced url filtering advanced wildfire aerospace +25

Unit 42 Collaborative Research With Ukraine’s Cyber Agency To Uncover the Smoke Loader Backdoor 1 month ago | unit42.paloaltonetworks.com

advanced threat prevention advanced url filtering advanced wildfire agency +21

SOC 2 Manager, Audit and Certification

@ Deloitte | US and CA Multiple Locations

View on infosec-jobs.com

Director, Data Security Lead

@ Mastercard | London, England (Angel Lane)

View on infosec-jobs.com

Security Officer L1

@ NTT DATA | Texas, United States of America

View on infosec-jobs.com

Sr. Staff Application Security Engineer

@ Aurora Innovation | Seattle, WA

View on infosec-jobs.com

Senior Penetration Testing Engineer

@ WPP | Chennai

View on infosec-jobs.com

Cyber Security - Senior Software Developer in Test

@ BlackBerry | Bengaluru, Residency Road

View on infosec-jobs.com