RSS   Vulnerabilities for 'Cryptacular'   RSS

2020-01-24
 
CVE-2020-7226

CWE-770
 

 
CiphertextHeader.java in Cryptacular 1.2.3, as used in Apereo CAS and other products, allows attackers to trigger excessive memory allocation during a decode operation, because the nonce array length associated with "new byte" may depend on untrusted input within the header of encoded data.

 


Copyright 2024, cxsecurity.com

 

Back to Top