Lucene search
+L
MicrosoftIdentity Model

1 matches found

CVE
CVE
added 2024/01/09 6:59 p.m.494 views

CVE-2024-21319

CVE-2024-21319 is a Microsoft Identity Denial-of-Service vulnerability with a network-exposed attack surface (AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H). Connected sources describe a DoS pattern via maliciously crafted JWE/JWT payloads that trigger heavy memory/CPU usage during decompression or process...

6.8CVSS6.6AI score0.02892EPSS
Save