Skip to content
Threat Feed
Subscribe

Vendor

Composer/Web-Token

2 briefs RSS
medium advisory

PHP JWT Library PBES2-HS*+A*KW Unbounded p2c Iteration Count Leads to DoS

An unauthenticated attacker can exploit a vulnerability in the PHP JWT Library's PBES2AESKW::unwrapKey() function when processing JWE tokens that use PBES2-HS*+A*KW algorithms by crafting a JWE with an excessively large 'p2c' (PBKDF2 iteration count) parameter in the JOSE header, forcing the server to perform an unbounded and CPU-intensive PBKDF2 computation, resulting in a CPU-amplification denial of service.

jwt-library +3 denial-of-service web php jwt jwe cwe-400
2r 1t
high advisory

PHP JWT Framework Algorithm Confusion Vulnerability (TOCTOU)

A Time-of-Check/Time-of-Use (TOCTOU) vulnerability exists in the `JWSVerifier` and `JWEDecrypter` components of the `web-token/jwt-framework` and `web-token/jwt-library` PHP packages, allowing an attacker to override the integrity-protected `alg` parameter from the unprotected header, leading to authentication bypass and unauthorized access.

jwt-framework <= 4.2.99 +3 vulnerability php jwt web authentication-bypass
2r 2t