CVE-2024-10920 PoC — mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key

Source

https://github.com/Maalfer/CVE-2024-10920-PoC

Associated Vulnerability

Title:mariazevedo88 travels-java-api JWT Secret JwtAuthenticationTokenFilter.java doFilterInternal hard-coded key (CVE-2024-10920)
Description:A vulnerability was found in mariazevedo88 travels-java-api up to 5.0.1 and classified as problematic. Affected by this issue is the function doFilterInternal of the file travels-java-api-master\src\main\java\io\github\mariazevedo88\travelsjavaapi\filters\JwtAuthenticationTokenFilter.java of the component JWT Secret Handler. The manipulation leads to use of hard-coded cryptographic key . The attack may be launched remotely. The complexity of an attack is rather high. The exploitation is known to be difficult. The exploit has been disclosed to the public and may be used.

Description

Bypass del MFA en WordPress con el plugin Really Simple Security instalado entre las versiones 9.0.0 – 9.1.1.1.

Readme

# PoC Authentication Bypass MFA Really Simple Security WordPress Plugin

Accedemos a la página web de wordpress donde veremos que tiene MFA activado a través del plugin vulnerable:

![imagen](https://github.com/user-attachments/assets/0b6b5736-e7aa-45ba-b6f4-d2db7a45d9ee)

Debemos ejecutar la PoC y proporcionar los datos de acceso:


![imagen](https://github.com/user-attachments/assets/c551b296-6835-49b3-b844-4d532e4b53e2)

De forma automática, se abrirá el navegador mediante un archivo temporal .html dentro del panel de administración.

![imagen](https://github.com/user-attachments/assets/2de116bb-302b-4d6b-b12d-d986b162e9ee)

Para desplegar automáticamente un entorno vulnerable donde recrear este escenario, se puede utilizar el siguiente repositorio:

https://github.com/Trackflaw/CVE-2024-10924-Wordpress-Docker

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!