CVE-2017-12973: Nimbus JOSE+JWT Vulnerable to Padding Oracle Attack
Summary
CVE-2017-12973: Nimbus JOSE+JWT vulnerable to padding oracle attack. Affects com.nimbusds:nimbus-jose-jwt versions < 4.39. Fixed in 4.39. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Nimbus JOSE+JWT is a Java library that provides support for JSON Web Tokens (JWT) and JSON Object Signing and Encryption (JOSE). It is commonly used for implementing secure authentication and authorization mechanisms in Java applications. The library allows developers to generate, parse, and validate JWTs, as well as perform encryption and decryption operations using various JOSE algorithms. However, versions of Nimbus JOSE+JWT prior to 4.39 are vulnerable to a padding oracle attack.
Vulnerability Detail
The vulnerability in Nimbus JOSE+JWT arises from improper handling of an invalid HMAC in authenticated AES-CBC decryption. This flaw can be exploited by attackers to conduct a padding oracle attack. By manipulating the padding of encrypted data, an attacker can gain information about the plaintext and potentially decrypt sensitive information. The impact of this vulnerability can range from unauthorized access to sensitive data to complete compromise of the application's security.
How To Fix
Latest published version: 10.10 as of 22 Oct 2026
Upgrading to it may include breaking changes; the version below is the minimum fixed release for this vulnerability.
If you need the minimum change
4.39
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no known workaround for this vulnerability. It is strongly recommended to upgrade to the fixed version of Nimbus JOSE+JWT as soon as possible.
Conclusion
Nimbus JOSE+JWT versions prior to 4.39 are vulnerable to a padding oracle attack. This can lead to unauthorized access to sensitive data and compromise the security of the application. It is crucial to upgrade to the fixed version (4.39 or later) of Nimbus JOSE+JWT to mitigate this vulnerability. For more information and assistance, please contact DevNack.com.
See every vulnerability recorded for com.nimbusds:nimbus-jose-jwt →
FAQ
Nimbus JOSE+JWT is a Java library for JSON Web Tokens (JWT) and JSON Object Signing and Encryption (JOSE). It provides functionality for generating, parsing, and validating JWTs, as well as performing encryption and decryption operations using various JOSE algorithms.
A padding oracle attack is a cryptographic attack that exploits the behavior of a system when decrypting data with incorrect padding. By manipulating the padding of encrypted data, an attacker can gain information about the plaintext and potentially decrypt sensitive information.
The consequences of this vulnerability can range from unauthorized access to sensitive data to complete compromise of the application's security. Attackers may be able to decrypt encrypted data, impersonate users, or gain unauthorized access to protected resources.
You can use Vulert's playground (https://vulert.com/scanner) to check if your application is affected by this vulnerability. Vulert monitors and alerts in real-time for open-source vulnerabilities in software using just the pom.xml file, without requiring access to the code or installation.
For further support on vulnerability remediation, you can contact info@devnack.com. They can provide guidance and assistance in addressing this vulnerability in your application.
Related vulnerabilities
Recent vulnerabilities recorded for com.nimbusds:nimbus-jose-jwt.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
