POC-CVE-2018-0114

POC-CVE-2018-0114 This repository contains the POC of an exploit for node-jose Stating from the last merge python lib: base64,urllib,rsa,sys Running the tests To run the script just run the following command: python jwk-node-jose.py "payload" key-size key-size whitout Authors Andrea Cappa -...

CVE-2018-0114-Exploit

CVE-2018-0114-Exploit Une vulnérabilité dans la bibliothèque open source node-jose de Cisco avant la version 0.11.0 pourrait permettre à un attaquant distant non authentifié de re-signer des jetons en utilisant une clé intégrée dans le jeton. La vulnérabilité est due au fait que node-jose suit la...

Security Bulletin: Authlib JOSE Denial of Service via Unbounded JWS or JWT Header and Signature Parsing, affects watsonx.data

Summary Authlib versions before 1.6.5 are vulnerable to a denial-of-service attack where oversized JWS/JWT headers or signatures consume excessive CPU and memory during parsing. The issue is fixed in 1.6.5, temporary mitigations include enforcing token size limits and request throttling. This can...