Lucene search

K
osvGoogleOSV:GHSA-6QVW-249J-H44C
HistoryFeb 29, 2024 - 3:33 a.m.

jose4j denial of service via specifically crafted JWE

2024-02-2903:33:14
Google
osv.dev
13
jose4j
java
denial of service
crafted jwe
cpu consumption

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%