CVE-2025-63811: Jose2go: denetimsiz kaynak tüketimi

Açıklama (NVD)

An issue was discovered in dvsekhvalnov jose2go 1.5.0 thru 1.7.0 allowing an attacker to cause a Denial-of-Service (DoS) via crafted JSON Web Encryption (JWE) token with an exceptionally high compression ratio.

Özet bilgiler

Ürün

Dvsekhvalnov Jose2go

CVSS v3.1

7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS

%0,28 (yüzdelik 20)

CWE

CWE-400

Yama

Geçici çözüm

Etkilenen sürümler

Kaynaklar

• NVD kaydı
• github.com
• CWE-400