CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LCVE-2023-6681
Medium (5.3). EPSS 0.9% chance of exploitation in the next 30 days. Fixed in jwcrypto 1.5.1.
A vulnerability was found in JWCrypto. This flaw allows an attacker to cause a denial of service (DoS) attack and possible password brute-force and dictionary attacks to be more resource-intensive. This issue can result in a large amount of computational consumption, causing a denial of service attack.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fedoraproject:fedora
- latchset:jwcrypto
- redhat:enterprise_linux
- redhat:enterprise_linux_for_arm_64
- redhat:enterprise_linux_for_ibm_z_systems
- redhat:enterprise_linux_for_power_little_endian
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-cw2r-4p82-qv79 | PyPI | jwcrypto | <1.5.1 | 1.5.1 |
| PYSEC-2024-104 | PyPI | jwcrypto | <1.5.1 | 1.5.1 |