CVE-2023-33236

CriticalCVSS 9.8

Published: 22/05/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.97%

57th percentile - higher than 57% of all known CVEs

Summary

MXsecurity version 1.0 is vulnerable to hardcoded credential vulnerability. This vulnerability allows crafting arbitrary JWT tokens, enabling bypassing authentication for web-based APIs.

Risk Assessment

The organization may be exposed to unauthorized access to its APIs, potentially leading to data breaches or other serious security incidents.

Recommendation

It is recommended to update MXsecurity to the latest version to mitigate this vulnerability and conduct a security audit of the APIs.

Original NVD description (English source)

MXsecurity version 1.0 is vulnearble to hardcoded credential vulnerability. This vulnerability has been reported that can be exploited to craft arbitrary JWT tokens and subsequently bypass authentication for web-based APIs.