CVE-2019-18848

Опубликовано: 12 нояб. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.

Ссылки

https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a
Patch
https://github.com/nov/json-jwt/compare/v1.10.2...v1.11.0
Patch
https://lists.debian.org/debian-lts-announce/2020/10/msg00001.html
Mailing List
Third Party Advisory
https://github.com/nov/json-jwt/commit/ada16e772906efdd035e3df49cb2ae372f0f948a
Patch
https://github.com/nov/json-jwt/compare/v1.10.2...v1.11.0
Patch
https://lists.debian.org/debian-lts-announce/2020/10/msg00001.html
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:json-jwt_project:json-jwt:*:*:*:*:*:ruby:*:*

Версия до 1.11.0 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00484

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287

Связанные уязвимости

CVE-2019-18848

CVSS3: 7.5

ubuntu

около 6 лет назад

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.

CVE-2019-18848

CVSS3: 7.5

debian

около 6 лет назад

The json-jwt gem before 1.11.0 for Ruby lacks an element count during ...

GHSA-cff7-6h4q-q5pj

CVSS3: 7.5

github

около 6 лет назад

JSON-jwt Gem lacked element count during splitting of JWE string

openSUSE-SU-2025:0004-1

suse-cvrf

около 1 года назад

Security update for rubygem-json-jwt

EPSS

Процентиль: 65%

0.00484

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-287