CVE-2023-53951

Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.

CVSS v4.0

9.3 CRITICALCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.36% chance of exploitation in the next 30 days, 29th percentile

Published

2025-12-19

Updated

2026-04-07

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/51354

References

• CVE Record
• NVD entry

Related

• CVE-2023-53950
• CVE-2023-53952
• CVE-2023-53949
• CVE-2023-53953
• CVE-2023-53948
• CVE-2023-53954