Authentikat Jwt Project

authentikat-jwt_project

1 CVE • 1 product

Products (1)

Click to collapse

Toggle

Authentikat Jwt

authentikat-jwt

1 CVE

CVEs (1)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2017-18239 1Authentikat Jwt Project 1Authentikat Jwt Nov 21, 2024 Mar 18, 2018 N/A· v4 9.8 CRITICAL· v3 5.0 MEDIUM· v2 A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earli...Show more A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests.Show less

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2017-18239

1Authentikat Jwt Project

1Authentikat Jwt

Nov 21, 2024

Mar 18, 2018

N/A· v4

9.8 CRITICAL· v3

5.0 MEDIUM· v2

A time-sensitive equality check on the JWT signature in the JsonWebToken.validate method in main/scala/authentikat/jwt/JsonWebToken.scala in authentikat-jwt (aka com.jason-goodwin/authentikat-jwt) version 0.4.5 and earlier allows the supplier of a JWT token to guess bit after bit of the signature by repeating validation requests.Show less