CVE-2025-1293
- Source
- https://cve.org/CVERecord?id=CVE-2025-1293
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-1293.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2025-1293
- Aliases
- Downstream
- Related
- Published
- 2025-02-20T01:15:09.950Z
- Modified
- 2026-02-04T04:11:36.891257Z
- Severity
-
- 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N CVSS Calculator
- Summary
- [none]
- Details
-
Hermes versions up to 0.4.0 improperly validated the JWT provided when using the AWS ALB authentication mode, potentially allowing for authentication bypass. This vulnerability, CVE-2025-1293, was fixed in Hermes 0.5.0.
- References