CVE-2024-25189
PoC —CVSS 3.1
9.8 critical
EPSS
<1%p59
Published
()
Modified
Description
libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.
In the news0 stories
No ingested article mentions this CVE yet.