Critical severity · published Jun 22, 2020
CVE-2020-14968
An issue was discovered in the jsrsasign package before 8.0.17 for Node.js
9.8
CVSS
2.9%
EPSS
No
On KEV
Description
An issue was discovered in the jsrsasign package before 8.0.17 for Node.js. Its RSASSA-PSS (RSA-PSS) implementation does not detect signature manipulation/modification by prepending '\0' bytes to a signature (it accepts these modified signatures as valid). An attacker can abuse this behavior in an application by creating multiple valid signatures where only one signature should exist. Also, an attacker might prepend these bytes with the goal of triggering memory corruption issues.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
JS
Jsrsasign · Kjur
before 8.0.17 · source: NVD
MD
Max Data · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-14968
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-14968
Exploit
https://github.com/kjur/jsrsasign/issues/438
Release Notes
https://github.com/kjur/jsrsasign/releases/tag/8.0.17
Release Notes
https://github.com/kjur/jsrsasign/releases/tag/8.0.18
Release Notes
https://kjur.github.io/jsrsasign/
Third Party Advisory
https://security.netapp.com/advisory/ntap-20200724-0001/
Product
https://www.npmjs.com/package/jsrsasign
More from Jsrsasign
9.8
CVE-2022-25898
The package jsrsasign before 10.5.25 are vulnerable to Improper Verification of Cryptographic Signature when JWS or JWT signature with non Base64URL encoding special characters or…
9.8
CVE-2020-14967
An issue was discovered in the jsrsasign package before 8.0.18 for Node.js
9.1
CVE-2026-4601
Versions of the package jsrsasign before 11.1.1 are vulnerable to Missing Cryptographic Step via the KJUR.crypto.DSA.signWithMessageHash process in the DSA signing implementation
9.1
CVE-2026-4599
Versions of the package jsrsasign from 7.0.0 and before 11.1.1 are vulnerable to Incomplete Comparison with Missing Factors via the getRandomBigIntegerZeroToMax and…
9.1
CVE-2026-4600
Versions of the package jsrsasign before 11.1.1 are vulnerable to Improper Verification of Cryptographic Signature via the DSA domain-parameter validation in…