🔐 CVE-2023-51775: org.bitbucket.b_c:jose4j:jar:0.9.3:test

[github-actions[bot]]

Summary

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

Sonatype's research suggests that this CVE's details differ from those defined at NVD. See https://ossindex.sonatype.org/vulnerability/CVE-2023-51775 for details

CVE: CVE-2023-51775 CWE: CWE-400

References

• https://ossindex.sonatype.org/vulnerability/CVE-2023-51775?component-type=maven&component-name=org.bitbucket.b_c%2Fjose4j&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-51775
• https://bitbucket.org/b_c/jose4j/issues/212