Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-32007

An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a token. 

Published

2024-07-19T09:15:04.713

Last Modified

2024-11-21T09:14:20.010

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.5 (HIGH)

Weaknesses
  • Type: Secondary
    CWE-20
    CWE-400
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application apache cxf < 3.5.9 Yes
Application apache cxf < 3.6.4 Yes
Application apache cxf < 4.0.5 Yes
References