Lucene search

K
osvGoogleOSV:CVE-2023-50966
HistoryMar 19, 2024 - 3:15 p.m.

CVE-2023-50966

2024-03-1915:15:07
Google
osv.dev
5
cve-2023-50966
erlang
jose
denial of service
cpu consumption
pbes2 count
vulnerability

AI Score

7

Confidence

High

EPSS

0

Percentile

15.5%

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

AI Score

7

Confidence

High

EPSS

0

Percentile

15.5%