GHSA-wm25-j4gw-6vr3: pREST vulnerable to jwt bypass + sql injection

Should you act?

• Only if you depend on one of the packages below, directly or transitively, in a vulnerable version. Check your lockfile with govulncheck ./....
• No CVE has been assigned, so it will not appear in CVE-based scanners that ignore GitHub advisories. npm audit, pip-audit and Dependabot do read GitHub advisories.

Affected packages

Details

Summary Probably jwt bypass + sql injection or what i'm doing wrong?

PoC (how to reproduce)

1. Create following files:

docker-compose.yml:

Dockerfile:

prest.toml:

2. run commands:

wait for pg and prest, then run following to add test data to the pg:

CVSS: 9.3 (v4.0) CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Sources and references

1. GitHub Advisory GHSA-wm25-j4gw-6vr3 github.com
2. github.com github.com
3. github.com github.com
4. pkg.go.dev pkg.go.dev

Critical Go advisories · Today’s Security Digest