CVE-2023-51775

jose4j denial of service via specifically crafted JWE

Description

The jose4j component before 0.9.4 for Java allows attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value.

Patch Available

Fix available through Seal Security.  
No upgrade required, protect your application instantly.

Fix without upgrading

Score

Severity

Ecosystem

Java

Publish Date

February 28, 2024

Modified Date

November 4, 2025

Score Vector

Affected Versions