Lucene search
GoogleOSV:CVE-2017-16007HistoryJun 04, 2018 - 7:29 p.m.
CVE-2017-16007
2018-06-0419:29:00
Google
osv.dev
2
0.002 Low
EPSS
Percentile
60.9%
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the private secret key when JWE with Key Agreement with Elliptic Curve Diffie-Hellman Ephemeral Static (ECDH-ES) is used.
Related
prion
prion
Code injection
2018-06-04 19:29:00
nvd
nvd
CVE-2017-16007
2018-06-04 19:29:00
cvelist
cvelist
CVE-2017-16007
2018-04-26 00:00:00
cve
cve
CVE-2017-16007
2018-06-04 19:29:00
nodejs
nodejs
Invalid Curve Attack
2017-03-13 19:16:33
github
github
Invalid Curve Attack in node-jose
2018-07-20 21:10:14
veracode
veracode
Invalid Curve Attack
2017-03-14 00:10:36
osv
osv
Invalid Curve Attack in node-jose
2018-07-20 21:10:14
