Description
AES_CBC_HMAC_SHA2 Algorithm (A128CBC-HS256, A192CBC-HS384, A256CBC-HS512) decryption would always execute both HMAC tag verification and CBC decryption, if either failed JWEDecryptionFailed would be thrown.
Recommendation
Update the jose-browser-runtime package to the latest compatible version. Followings are version details:
- Affected version(s): < 3.11.4
- Patched version(s): 3.11.4
References
Could your website be exposed too?
SmartScanner can check your website for Padding Oracle Attack due to Observable Timing Discrepancy in jose-browser-runtime and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-esm-runtime - CVE-2021-29445
- Padding Oracle Attack due to Observable Timing Discrepancy in jose-node-cjs-runtime - CVE-2021-29446
- Padding Oracle Attack due to Observable Timing Discrepancy in jose - CVE-2021-29443
- JOSE vulnerable to resource exhaustion via specifically crafted JWE - jose-browser-runtime - CVE-2022-36083
You might also like:
See something that needs correcting? Let us knowUpdated March 26, 2023