CVE-2024-32007

—

CVSS 3.1

7.5 high

EPSS

1%p68

Published

Jul 19, 2024 (Jul 19, 2024)

Modified

Jun 17, 2026

Description

An improper input validation of the p2c parameter in the Apache CXF JOSE code before 4.0.5, 3.6.4 and 3.5.9 allows an attacker to perform a denial of service attack by specifying a large value for this parameter in a token.

Vendors: apache
Products: cxf
Weakness: CWE-20, CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.