Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:45757
HistoryMar 05, 2024 - 6:37 a.m.

Denial Of Service (DoS)

2024-03-0506:37:59
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
jose4j
vulnerability
insufficient validation
pbes2 count
dos
cpu usage
attackers
software

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.4%

jose4j is vulnerable to Denial of Service (DoS). The vulnerability is due to insufficient validation of a large p2c (PBES2 Count) value, allowing attackers to trigger excessive CPU usage. This potentially leads to Denial of Service (DoS).

CPENameOperatorVersion
jose4jle0.9.3
jose4jle0.9.3

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.4%