CVE-2022-32096

Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2022-07-13

Last modified

2024-08-03

Weaknesses

CWE-120

Affected products

• Rhonabwy (Rhonabwy Project)

References

• https://github.com/babelouest/rhonabwy/
• https://github.com/babelouest/rhonabwy/commit/b4c2923a1ba4fabf9b55a89244127e153a3e549b