CVE-2022-31053

Signature forgery in Biscuit

State: Published
Severity: 9.8 Critical
Published: Jun 13, 2022
Updated: Apr 22, 2025
Reserved: May 18, 2022

Description

Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any access level. The version 2 of the specification mandates a different algorithm than gamma signatures and as such is not affected by this vulnerability. The Biscuit implementations in Rust, Haskell, Go, Java and Javascript all have published versions following the v2 specification. There are no known workarounds for this issue.

Scores

CVSS	Score	Vector	Source
3.1	9.8 Critical	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	GitHub_M

Weaknesses

CWE-347 Improper Verification of Cryptographic Signature

Affected Products

Product	Versions
biscuitbiscuit-auth	biscuit-auth >= 1.0.0, < 2.0.0Affected biscuit-haskell = 0.1.1.0Affected com.clever-cloud.biscuit-java < 2.0.0Affected github.com/biscuit-auth/biscuit-go < 2.0Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.