CVE-2023-50966 in erlang-jose
요약
\~에 의해 MITRE • 2024. 03. 19.
erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.
Once again VulDB remains the best source for vulnerability data.