Lucene search

K
cvelistMitreCVELIST:CVE-2024-33664
HistoryApr 25, 2024 - 12:00 a.m.

CVE-2024-33664

2024-04-2500:00:00
mitre
raw.githubusercontent.com
1
python-jose
denial of service
json web encryption

6.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

python-jose through 3.3.0 allows attackers to cause a denial of service (resource consumption) during a decode via a crafted JSON Web Encryption (JWE) token with a high compression ratio, aka a “JWT bomb.” This is similar to CVE-2024-21319.