org.bitbucket.b_c:jose4j

2 results · Clear filters · Feed

• Medium 6.5
  CVE-2023-51775

  jose4j denial of service via specifically crafted JWE

  The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

  confluent-kafka confluent-common-docker org.bitbucket.b_c:jose4j libjose4j-java Debian Ubuntu Wolfi Maven
  Dec 25, 2023
• Medium —
  GHSA-jgvc-jfgh-rjvv

  Chosen Ciphertext Attack in Jose4j

  ### Summary RSA1_5 in jose4j is susceptible to chosen ciphertext attacks. The attack allows to decrypt RSA1_5 or RSA_OAEP encrypted ciphertexts. It may be feasible to sign with affected keys. ### Severity Moderate - exploiting this ciphertext attack could res…

  org.bitbucket.b_c:jose4j Maven
  Apr 27, 2023