---
title: "GHSA-wm25-j4gw-6vr3: pREST vulnerable to jwt bypass + sql injection"
url: https://erroneo.us/security/ghsa/GHSA-wm25-j4gw-6vr3/
description: "GHSA-wm25-j4gw-6vr3 (critical, Go): pREST vulnerable to jwt bypass + sql injection. Summary Probably jwt bypass + sql injection or what i'm doing wrong? PoC…"
type: advisory
section: "Security Digest"
date_published: 2024-07-30
date_modified: 2024-08-07
publisher: erroneo.us
author: erroneo.us Security Desk
ghsa: "GHSA-wm25-j4gw-6vr3"
license: All rights reserved. Quote with attribution and a link.
---

# GHSA-wm25-j4gw-6vr3: pREST vulnerable to jwt bypass + sql injection

## Affected packages

- Go `github.com/prest/prest` < 1.5.4 → fixed: 1.5.4

## Details

Summary Probably jwt bypass + sql injection or what i'm doing wrong? PoC (how to reproduce) 1. Create following files: docker-compose.yml: Dockerfile: prest.toml: 2. run commands: wait for pg and prest, then run following to add test data to the pg: 3. SQL injection even without jwt token: output:

## Sources

- [GitHub Advisory GHSA-wm25-j4gw-6vr3](https://github.com/advisories/GHSA-wm25-j4gw-6vr3)
- [github.com](https://github.com/prest/prest/security/advisories/GHSA-wm25-j4gw-6vr3)
- [github.com](https://github.com/prest/prest/commit/96ff96cfdc7ad6dd86e2289fcd5a37ee70c8926e)
- [pkg.go.dev](https://pkg.go.dev/vuln/GO-2024-3011)

---
Source page: https://erroneo.us/security/ghsa/GHSA-wm25-j4gw-6vr3/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt