high7.5
CVE-2022-32096
Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap.
Impact
Rhonabwy before v1.1.5 was discovered to contain a buffer overflow via the component r_jwe_aesgcm_key_unwrap. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted JWE token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rhonabwy Project | Rhonabwy | before 1.1.5 |