High severity7.5NVD Advisory· Published Oct 25, 2023· Updated Jun 17, 2026
CVE-2023-31582
CVE-2023-31582
Description
jose4j before v0.9.3 allows attackers to set a low iteration count of 1000 or less.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.bitbucket.b_c:jose4jMaven | < 0.9.3 | 0.9.3 |
Affected products
38- osv-coords36 versionspkg:apk/chainguard/hadoop-fips-3.3.6pkg:maven/org.bitbucket.b_c/jose4jpkg:rpm/suse/cobbler&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/grafana-formula&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/inter-server-sync&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/jose4j&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/liberate-formula&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/mgr-daemon&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/patterns-suse-manager&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/patterns-suse-manager&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/prometheus-formula&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/prometheus-postgres_exporter&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/saltboot-formula&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/spacecmd&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/spacewalk-backend&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/spacewalk-certs-tools&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/spacewalk-client-tools&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-java&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-setup&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-utils&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/spacewalk-web&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/subscription-matcher&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/supportutils-plugin-susemanager&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/susemanager&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/susemanager-build-keys&distro=SUSE%20Manager%20Proxy%20Module%204.3pkg:rpm/suse/susemanager-build-keys&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/susemanager-docs_en&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/susemanager-schema&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/susemanager-sls&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/susemanager-sync-data&distro=SUSE%20Manager%20Server%20Module%204.3pkg:rpm/suse/uyuni-reportdb-schema&distro=SUSE%20Manager%20Server%20Module%204.3
< 3.3.6-r15+ 35 more
- (no CPE)range: < 3.3.6-r15
- (no CPE)range: < 0.9.3
- (no CPE)range: < 3.3.3-150400.5.39.5
- (no CPE)range: < 0.10.0-150400.3.15.5
- (no CPE)range: < 0.3.2-150400.3.27.5
- (no CPE)range: < 0.5.1-150400.3.6.2
- (no CPE)range: < 0.1.0-150400.10.3.3
- (no CPE)range: < 4.3.8-150400.3.12.5
- (no CPE)range: < 4.3-150400.5.9.5
- (no CPE)range: < 4.3-150400.5.9.5
- (no CPE)range: < 0.8.0-150400.3.6.5
- (no CPE)range: < 0.10.1-150400.3.9.5
- (no CPE)range: < 0.1.1701196218.b6b8ca1-150400.3.15.3
- (no CPE)range: < 4.3.26-150400.3.33.5
- (no CPE)range: < 4.3.26-150400.3.33.5
- (no CPE)range: < 4.3.27-150400.3.38.2
- (no CPE)range: < 4.3.27-150400.3.38.2
- (no CPE)range: < 4.3.22-150400.3.25.1
- (no CPE)range: < 4.3.22-150400.3.25.1
- (no CPE)range: < 4.3.18-150400.3.24.7
- (no CPE)range: < 4.3.18-150400.3.24.7
- (no CPE)range: < 4.3.71-150400.3.74.2
- (no CPE)range: < 4.3.19-150400.3.30.5
- (no CPE)range: < 4.3.19-150400.3.21.5
- (no CPE)range: < 4.3.37-150400.3.39.7
- (no CPE)range: < 4.3.37-150400.3.39.7
- (no CPE)range: < 0.35-150400.3.19.5
- (no CPE)range: < 4.3.10-150400.3.18.5
- (no CPE)range: < 4.3.34-150400.3.45.5
- (no CPE)range: < 15.4.10-150400.3.23.5
- (no CPE)range: < 15.4.10-150400.3.23.5
- (no CPE)range: < 4.3-150400.9.53.5
- (no CPE)range: < 4.3.24-150400.3.36.7
- (no CPE)range: < 4.3.40-150400.3.44.1
- (no CPE)range: < 4.3.16-150400.3.22.2
- (no CPE)range: < 4.3.9-150400.3.12.7
Patches
Vulnerability mechanics
References
5- github.com/KANIXB/JWTIssues/blob/main/jose4j%20issue.mdnvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-7g24-qg88-p43qghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2023-31582ghsaADVISORY
- bitbucket.org/b_c/jose4j/commits/1929fe3ghsaWEB
- bitbucket.org/b_c/jose4j/issues/203/insecure-support-of-setting-pbe-less-thennvdIssue TrackingWEB
News mentions
0No linked articles in our index yet.