Lucene search

K
cveMitreCVE-2023-52428
HistoryFeb 11, 2024 - 5:15 a.m.

CVE-2023-52428

2024-02-1105:15:08
mitre
web.nvd.nist.gov
5591
cve-2023-52428
connect2id nimbus
jose
jwt
denial of service
resource consumption
pbkdf2
nvd

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

15.5%

In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.

AI Score

6.3

Confidence

Low

EPSS

0

Percentile

15.5%