CVE-2025-54887 PoC — JWE 安全漏洞

Description

Proof of Concept for CVE-2025-54887

介绍

# PoC_CVE-2025-54887

This repository contains Proof-of-Concept (PoC) exploit for CVE-2025-54887.

This is a vulnerability in ruby-jwe (version <= 1.1.0) where the authentication tag of encrypted JWEs can be brute forced, which may result in loss of confidentiality and provide ways to craft arbitrary JWEs.

**Writeup:**  [blog_link](https://medium.com/@5ing4m1404/poc-cve-2025-54887-ruby-jwe-authentication-tag-can-be-brute-forced-cd28176492bc) \
**Demonstration video:** [video_link](https://drive.google.com/file/d/1mAqC5OC9X6ktyDYTiW2jqSV0ys93QIa8/view?usp=sharing)

文件快照

备注