CVE-2024-25189

9.8CRITICAL

libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

게시됨: 2/8/2024업데이트됨: 11/18/2025
NVD에서 보기MITRE에서 보기

설명

libjwt 1.15.3 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

AI 분석AI 기반

영향받는 제품

debiandebian_linux
10.0
libjwtlibjwt
1.15.3

참조