CVE-2023-53951

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2023-53951

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53951.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2023-53951

Published

2025-12-19T21:05:50.739Z

Modified

2026-07-15T01:49:20.458565254Z

Severity

9.3 (Critical) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N CVSS Calculator

Summary

Ever Gauzy v0.281.9 JWT Authentication Weakness via HMAC Secret

Details

Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.

Database specific

{
    "cwe_ids": [
        "CWE-347"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/53xxx/CVE-2023-53951.json",
    "cna_assigner": "VulnCheck"
}

References

Affected packages

Git / github.com/ever-co/ever-gauzy

Affected ranges

Type

GIT

Repo

https://github.com/ever-co/ever-gauzy

Events

Introduced

5045efab3fdb6e309eabc07ac489f86eb7737fa7

Last affected

5045efab3fdb6e309eabc07ac489f86eb7737fa7

Database specific

{
    "extracted_events": [
        {
            "introduced": "0.281.9"
        },
        {
            "last_affected": "0.281.9"
        }
    ],
    "source": "AFFECTED_FIELD"
}

Affected versions

0.*

0.281.9

v0.*

v0.281.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-53951.json"