cve.bz

CVE-2023-31582

7.5 highEPSS 0.8%

High (7.5) in jose4j project jose4j. EPSS 0.8% chance of exploitation in the next 30 days. Fixed in org.bitbucket.b_c:jose4j 0.9.3.

jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.

Severity

CVSS 3.1

7.5 high
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE
CWE-331
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-7g24-qg88-p43qMavenorg.bitbucket.b_c:jose4j<0.9.30.9.3

References

Check your stackJSON