python-jose har 3.3.0 JWE Token JWT Bomb Kari na aiki

CVSS Meta Temp ScoreGarga na exploit ndiyam (≈)CTI Nganji Score
4.7$0-$5k0.00

Gundumabayani

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a python-jose har 3.3.0. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil $software_file, a cikin sashi JWE Token Handler. Wuro manipulation ga Kari na aiki. Ana kiran wannan rauni da CVE-2024-33664. Ngam yiɗi ka a tuma ndiyam ka nder layi. Babu wani exploit da ake da shi. Ya kamata a yi amfani da patch don magance wannan matsala. Entry ɗin nan yana da duplicate CVE-2024-29370 da aka haɗa masa. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Furɗebayani

Hakika vulnerability da aka rarraba a matsayin karshewa an gano a python-jose har 3.3.0. Tabbas, aikin $software_function ne ke da matsala; idan ba a bayyana ba, to aiki ce da ba a sani ba, a cikin laburare $software_library, a cikin fayil $software_file, a cikin sashi JWE Token Handler. Wuro manipulation ga Kari na aiki. Amfani da CWE wajen bayyana matsala yana kaiwa CWE-400. Lalle, rauni an sanar da shi da 344. Ana samun bayanin tsaro don saukewa a github.com.

Ana kiran wannan rauni da CVE-2024-33664. CVE assignement 04/25/2024 wa shikena. Ngam yiɗi ka a tuma ndiyam ka nder layi. Bayani na fasaha ba ga. Wannan vulnerability ɗin ba a san shi sosai ba. Babu wani exploit da ake da shi. Yimbe ndiyam, exploit might be approx. USD $0-$5k wuro.

Á yí a wondi feere.

Za a iya sauke maganin matsalar daga github.com. Ya kamata a yi amfani da patch don magance wannan matsala.

Entry ɗin nan yana da duplicate CVE-2024-29370 da aka haɗa masa. Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Kayanbayani

Nganji

Sunu

Furɗe

CPE 2.3bayani

CPE 2.2bayani

CVSSv4bayani

VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CVSSv3bayani

VulDB Meta Base Score: 4.8
VulDB Meta Temp Score: 4.7

VulDB Ganda Borno: 4.3
VulDB Temp Score: 4.1
VulDB Furɗo: 🔍
VulDB Gaskiya: 🔍

CNA Ganda Borno: 5.3
CNA Furɗo: 🔍

CVSSv2bayani

AVACAuCIA
💳💳💳💳💳💳
💳💳💳💳💳💳
💳💳💳💳💳💳
VektarKumpleksitiAuthentisierungKariyandiGaskiyaGashina
furufurufurufurufurufuru
furufurufurufurufurufuru
furufurufurufurufurufuru

VulDB Ganda Borno: 🔍
VulDB Temp Score: 🔍
VulDB Gaskiya: 🔍

Gargajiyabayani

Klasu: Kari na aiki
CWE: CWE-400 / CWE-404
CAPEC: 🔍
ATT&CK: 🔍

Fizikal: Ayi
Gumti: Ayi
Gana: Ee

Gashina: 🔍
Halitta: A wondi feere

EPSS Score: 🔍
EPSS Percentile: 🔍

Furɗo farashi: 🔍
Gaskiya farashi ndiyam: 🔍

0-Dayfurufurufurufuru
Lalefurufurufurufuru

Bayani na barazanabayani

Ngam: 🔍
Akteɓe ɓernde: 🔍
Kura APT goruwa masu aiki: 🔍

Kari gamjibayani

Garga: Kari
Halitta: 🔍

0-Day Gana: 🔍

Kari: github.com

Waktin layibayani

04/25/2024 🔍
04/26/2024 +1 Hənde 🔍
04/26/2024 +0 Hənde 🔍
12/17/2025 +600 Hənde 🔍

Ngizimbayani

Gargaaji: 344
Halitta: Gaskiya

CVE: CVE-2024-33664 (🔍)
CVE Dublikat: 🔍
GCVE (CVE): GCVE-0-2024-33664
GCVE (VulDB): GCVE-100-262057

Gumtibayani

Súgá: 04/26/2024 07:44
Gargadi: 12/17/2025 18:39
Goyarwa: 04/26/2024 07:44 (57), 09/05/2024 18:33 (13), 12/17/2025 18:39 (1)
Gadankam: 🔍
Cache ID: 253:529:103

Ganaaji

A ga wuroyo kulu. Kàlàmbe: kr + en.

Ngam loga ka, kanyi shidin dum.

Interested in the pricing of exploits?

See the underground prices here!