JWT Token Expiration Bypass in SYSSY Project

Executive Summary

CVE-2026-77130 is a vulnerability in the SYSSY TYPO3 extension where the system fails to check if a JWT token is expired. This allows an attacker who already has the API key to authenticate using an expired token.

Useful 0 Not Useful 0

Detection Guidance

Check if the SYSSY extension version is 3.0.5 or below using commands like 'composer show syssy' or by inspecting the extension list in the TYPO3 backend. Review API key logs for unusual authentication attempts with expired JWT tokens.

Useful 0 Not Useful 0

Impact Analysis

If you use the SYSSY extension versions 3.0.5 or below, an attacker with access to your API key could bypass authentication checks by using an expired token. This may lead to unauthorized access to system data or functions.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability may impact compliance with GDPR and HIPAA by allowing unauthorized access to sensitive data through expired JWT tokens. If an attacker exploits this flaw, they could gain persistent access to systems or data, violating confidentiality and integrity requirements under these regulations.

Useful 0 Not Useful 0

Mitigation Strategies

Update the SYSSY extension to version 3.0.6 immediately. Rotate all API keys associated with the SYSSY project to invalidate any potentially compromised keys.

Useful 0 Not Useful 0