Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
osvGoogleOSV:CVE-2024-31033
HistoryApr 01, 2024 - 2:15 a.m.

CVE-2024-31033

2024-04-0102:15:07
Google
osv.dev
40
cve-2024-31033
java jwt
software security

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.5%

JSON

JJWT (aka Java JWT) through 0.12.5 ignores certain characters and thus a user might falsely conclude that they have a strong key. The impacted code is the setSigningKey() method within the DefaultJwtParser class and the signWith() method within the DefaultJwtBuilder class.

Related

ibm 3
nvd 1
github 1
cvelist 1
vulnrichment 1
osv 1
cve 1
ibm
ibm
Security Bulletin: IBM Sterling Connect:Direct Web Service is affected by Java JWT vulnerability
2024-08-09 05:50:51
Security Bulletin: Vulnerability in jjwt may affect IBM Business Automation Workflow - CVE-2024-31033
2024-06-03 11:26:11
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation Fixes for May 2024.
2024-06-04 17:15:55
nvd
nvd
CVE-2024-31033
2024-04-01 02:15:07
github
github
Withdrawn: JJWT improperly generates signing keys
2024-04-01 03:30:38
cvelist
cvelist
CVE-2024-31033
2024-04-01 00:00:00
vulnrichment
vulnrichment
CVE-2024-31033
2024-04-01 00:00:00
osv
osv
JJWT improperly generates signing keys
2024-04-01 03:30:38
cve
cve
CVE-2024-31033
2024-04-01 02:15:07

AI Score

6.7

Confidence

High

EPSS

0

Percentile

15.5%

JSON
Related for OSV:CVE-2024-31033
ibm3nvd1github1cvelist1vulnrichment1osv1cve1