Connect2id: community verdicts

1 notable / known-exploited Connect2id CVE the community has triaged.

ⓘ Not an exhaustive list: we focus on the findings that matter (exploited / notable). For every Connect2id CVE, see NVD ↗.

CVE-2023-52428HIGH 7.5Real · low riskEPSS 1%
In Connect2id Nimbus JOSE+JWT before 9.37.2, an attacker can cause a denial of service (resource consumption) via a large JWE p2c header value (aka iteration count) for the PasswordBasedDecrypter (PBKDF2) component.