Lucene search
+L

1 matches found

OSV
OSV
added 2024/03/08 3:6 p.m.40 views

GHSA-HJ3V-M684-V259 JWX vulnerable to a denial of service attack using compressed JWE message

Summary This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high compression ratio. When this token is processed by the recipient, it results in significant memory...

6.8CVSS7.4AI score0.0057EPSS
SaveExploits1References7
Rows per page
Query Builder