CVE-2024-21484

Summary

CVE-2024-21484 is a cybersecurity vulnerability affecting versions of the jsrsasign package prior to 11.0.0. This issue allows an attacker to decrypt RSA-encrypted data through the exploitation of the Marvin security flaw during the PKCS1.5 or RSAOAEP decryption process. The attacker must have access to a significant number of ciphertexts encrypted with the same key to execute this vulnerability. A workaround involves replacing RSA and RSAOAEP decryption functions with alternative crypto libraries to mitigate the risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.