CVE-2022-38493

Published: 2022-08-20T20:15Z

Last Modified: 2024-11-21T07:16Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

Rhonabwy 0.9.99 through 1.1.x before 1.1.7 doesn't check the RSA private key length before RSA-OAEP decryption. This allows attackers to cause a Denial of Service via a crafted JWE (JSON Web Encryption) token. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt