L8W8Jwt
1 CVEs
product
Monthly
l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Authentication Bypass
L8W8Jwt
NVD
GitHub
CVSS 3.1
9.8
EPSS
0.9%
EPSS 1%
CVSS 9.8
CRITICAL
POC
Act Now
l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Authentication Bypass
L8W8Jwt
NVD
GitHub