CVE-2019-17195

Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.

Affected products

Nimbus Jose+Jwt

connect2id Nimbus Jose\+jwt

< 7.9

Fix

Available

CVSS 3.1

9.8 CRITICAL

EPSS

11.0% (96th percentile)

Weakness

CWE-755

NVD status

Modified

Published

2019-10-15