Опубликовано: 14 июн. 2023
Источник: github
Github: Прошло ревью
CVSS4: 8.7
CVSS3: 7.5
Описание
json-io vulnerable to stack exhaustion
An issue was discovered json-io through 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
Пакеты
Наименование
com.cedarsoftware:json-io
maven
Затронутые версииВерсия исправления
< 4.14.1
4.14.1
Связанные уязвимости
CVSS3: 7.5
redhat
больше 2 лет назад
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.
CVSS3: 7.5
nvd
больше 2 лет назад
An issue was discovered json-io thru 4.14.0 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.