CVE-2015-10004

Katalog CVE

CVSS 7.5 · High EPSS 0,78%

Kerentanan Exposure of Resource to Wrong Sphere pada json web token project json web token. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection, an attacker may use this to determine the expected HMAC.

Rincian

Terbit di NVD

27 Desember 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-668: Exposure of Resource to Wrong Sphere

EPSS (30 hari)

0,78% peluang dieksploitasi; lebih tinggi dari 54,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://pkg.go.dev/vuln/GO-2020-0023 patch · advisory vendor
• https://github.com/robbert229/jwt/commit/ca1404ee6e83fcbafb66b09ed0d543850a15b654 patch · advisory pihak ketiga
• https://github.com/robbert229/jwt/issues/12 issue tracking · advisory pihak ketiga