Lucene search

K
githubGitHub Advisory DatabaseGHSA-7G24-QG88-P43Q
HistoryOct 25, 2023 - 6:32 p.m.

jose4j uses weak cryptographic algorithm

2023-10-2518:32:21
CWE-327
CWE-331
GitHub Advisory Database
github.com
8
jose4j
weak algorithm
pbes2
iteration count
software

0.0005 Low

EPSS

Percentile

16.8%

jose4j before v0.9.3 allows attackers to set a low PBES2 iteration count of 1000 or less.

CPENameOperatorVersion
org.bitbucket.b_c:jose4jlt0.9.3

0.0005 Low

EPSS

Percentile

16.8%