CyberRota Analysis
AI-GeneratedThe vulnerability affects the jwcrypto library, allowing remote attackers to exploit malformed JSON Web Encryption (JWE) tokens with excessive period delimiters. This can trigger a MemoryError in the JWE.deserialize() function, resulting in a denial of service (DoS) for any services that handle untrusted JWE values. Organizations using jwcrypto for processing JWE tokens should prioritize addressing this issue to mitigate potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the JWE.deserialize() function to allocate excessive memory, leading to a MemoryError. This issue results in a denial of service (DoS) for services that process untrusted JWE values.