CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. Its EPSS score suggests a 11.0% probability of exploitation in the next 30 days.
CVE
CVE-2019-17195
Severity
CRITICAL
CVSS
9.8
EPSS
11.03%
Original NVD Description
Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or a potential authentication bypass.
Related CVEs
Other vulnerabilities affecting the same vendor(s)