ROOT-APP-MAVEN-CVE-2023-52428 CVE-2023-52428 in io.root.com.nimbusds:nimbus-jose-jwt - Patched by Root

Root has patched CVE-2023-52428 in the io.root.com.nimbusds:nimbus-jose-jwt package for Root:Maven. Multiple fixed versions available...

DoS (Denial of Service) Third-Party Dependency in Bitbucket Data Center and Server - CVE-2023-52428

This High severity vulnerability known as CVE-2023-52428 was introduced in 8.3.0, 8.3.1, 8.3.2, 8.3.3, 8.3.4, 8.4.0, 8.4.1, 8.4.2, 8.4.3, 8.4.4, 8.5.0, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.6.0, 8.6.1, 8.6.2, 8.6.3, 8.6.4, 8.7.0, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.8.0, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.9.0...

CVE-2023-52428

creationtimestamp| type| source ---|---|--- 2024-02-11 06:26:49+00:00| seen| https://t.me/ctinow/182691...

CVE-2023-52428

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service resource consumption via a large JWE p2c header value aka iteration count for the PasswordBasedDecrypter PBKDF2 component...