2024-04-04 08:46:00 +00:00

32 lines
1.1 KiB
JSON

{
"id": "CVE-2023-50966",
"sourceIdentifier": "cve@mitre.org",
"published": "2024-03-19T15:15:07.113",
"lastModified": "2024-03-19T16:33:58.680",
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header."
},
{
"lang": "es",
"value": "erlang-jose (tambi\u00e9n conocido como JOSE para Erlang y Elixir) hasta la versi\u00f3n 1.11.6 permite a los atacantes provocar una denegaci\u00f3n de servicio (consumo de CPU) a trav\u00e9s de un valor grande de p2c (tambi\u00e9n conocido como PBES2 Count) en un encabezado JOSE."
}
],
"metrics": {},
"references": [
{
"url": "https://github.com/P3ngu1nW/CVE_Request/blob/main/erlang-jose.md",
"source": "cve@mitre.org"
},
{
"url": "https://github.com/potatosalad/erlang-jose",
"source": "cve@mitre.org"
},
{
"url": "https://hexdocs.pm/jose/JOSE.html",
"source": "cve@mitre.org"
}
]
}