CVE-2024-25191

9.8CRITICAL

php-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

发布于: 2/8/2024更新于: 6/12/2025
在NVD查看在MITRE查看

描述

php-jwt 1.0.0 uses strcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.

AI分析AI驱动

受影响产品

zihanggaophp-jwt
1.0.0

参考资料