CVE-2024-25190

9.8CRITICAL

l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

公開日: 2/8/2024更新日: 11/21/2024
NVDで表示MITREで表示

説明

l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

AI分析AIによる分析

影響を受ける製品

glitchedpolygonsl8w8jwt
2.2.1

参照