Read the docs

Inversoft

Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Inversoft records in CISA KEV

No Inversoft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Prime-jwt 2 records MEDIUM

Records

2 records in Prime-jwt · all components

TI-2018-15778 CVE-2018-1000125 · GHSA-rhv5-f6gj-fqm2

inversoft prime-jwt version prior to version 1.3.0 or prior to commit…

Priority MEDIUM 45

inversoft prime-jwt version prior to version 1.3.0 or prior to commit 0d94dcef0133d699f21d217e922564adbb83a227 contains an input validation vulnerability in JWTDecoder.decode that can result in a JWT that is decoded and…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01366 Published 2018-03-13 No fix listed CWE-20
TI-2018-15929 CVE-2018-1000531 · GHSA-jc5h-g7j7-qh2w

inversoft prime-jwt version prior to commit abb0d47…

Priority LOW 36

inversoft prime-jwt version prior to commit abb0d479389a2509f939452a6767dc424bb5e6ba contains a CWE-20 vulnerability in JWTDecoder.decode that can result in an incorrect signature validation of a JWT token.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01637 Published 2018-06-26 No fix listed CWE-20
Open these records in search →