Xmidt

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xmidt records in CISA KEV

No Xmidt vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record

TI-2019-13936 CVE-2019-19324 · GHSA-7w7c-8h3c-g577

LOW 35

Xmidt cjwt through 1.0.1 before 2019-11-25 maps unsupported algorithms to alg=none, which sometimes leads to untrusted accidental JWT acceptance.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01015 Published 2020-03-20 No fix listed CWE-670