{ "id": "CVE-2023-50966", "sourceIdentifier": "cve@mitre.org", "published": "2024-03-19T15:15:07.113", "lastModified": "2024-03-19T16:33:58.680", "vulnStatus": "Awaiting Analysis", "descriptions": [ { "lang": "en", "value": "erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header." }, { "lang": "es", "value": "erlang-jose (tambi\u00e9n conocido como JOSE para Erlang y Elixir) hasta la versi\u00f3n 1.11.6 permite a los atacantes provocar una denegaci\u00f3n de servicio (consumo de CPU) a trav\u00e9s de un valor grande de p2c (tambi\u00e9n conocido como PBES2 Count) en un encabezado JOSE." } ], "metrics": {}, "references": [ { "url": "https://github.com/P3ngu1nW/CVE_Request/blob/main/erlang-jose.md", "source": "cve@mitre.org" }, { "url": "https://github.com/potatosalad/erlang-jose", "source": "cve@mitre.org" }, { "url": "https://hexdocs.pm/jose/JOSE.html", "source": "cve@mitre.org" } ] }