CVE-2024-25190

2024-02-0800:00:00

mitre

raw.githubusercontent.com

l8w8jwt

authentication

vulnerability

timing side channel

memcmp

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.8%

JSON

l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.