Strapi through 4.5.5 does not verify the access or ID tokens issued during the OAuth flow when the AWS Cognito login provider is used for authentication. A remote attacker could forge an ID token that is signed using the 'None' type algorithm to bypass authentication and impersonate any user that use AWS Cognito for authentication.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| @strapi/plugin-users-permissions(npm) | 3.2.1 | 4.6.0 | N/A |
CVSS Metrics
