CVE-2024-25190
l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side chan...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
l8w8jwt 2.2.1 uses memcmp (which is not constant time) to verify authentication, which makes it easier to bypass authentication via a timing side channel.
Références
- advisory github.com
- advisory nvd.nist.gov
- web github.com