Reason Jose

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-23928 CRITICAL PATCH Act Now

reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Privilege Escalation Jwt Attack Reason Jose

NVD GitHub

CVSS 3.1

9.8

EPSS

0.5%

CVE-2023-23928

EPSS 0% CVSS 9.8

CRITICAL PATCH Act Now

reason-jose is a JOSE implementation in ReasonML and OCaml.`Jose.Jws.validate` does not check HS256 signatures. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Privilege Escalation Jwt Attack Reason Jose

NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy