Connect2id: >> Nimbus Jose+jwt >> 8.3 Security Vulnerabilities
In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-02-11