Lucene search

K
redhatcveRedhat.comRH:CVE-2024-28122
HistoryMar 10, 2024 - 9:37 a.m.

CVE-2024-28122

2024-03-1009:37:46
redhat.com
access.redhat.com
13
jwx
resource consumption
vulnerability
denial of service
jwe token
compression ratio
2024-28122
trusted public key

0.0004 Low

EPSS

Percentile

15.1%

An uncontrolled resource consumption vulnerability was found in jwx. This flaw allows an attacker with a trusted public key to cause a denial of service condition by crafting a malicious JWE token with an exceptionally high compression ratio.

0.0004 Low

EPSS

Percentile

15.1%