CyberRota Analysis
AI-GeneratedMojo::JWT versions prior to 1.02 for Perl are vulnerable due to a timing attack in the decode() method, which uses a non-constant-time string comparison for HMAC signature verification. This vulnerability allows an attacker to exploit timing variations to recover the expected signature, potentially leading to token forgery. Organizations using affected versions should prioritize patching to mitigate the risk of unauthorized access or data manipulation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Mojo::JWT versions before 1.02 for Perl verify HMAC signatures with a non-constant-time string comparison. The decode() method compares the supplied signature to the recomputed HMAC with Perl's eq operator, which stops at the first differing byte, so the comparison time varies with the number of matching leading bytes. A caller that decodes attacker supplied tokens leaks the expected signature through this timing variation, which can be aggregated over many requests to recover the signature and forge a token.