jsonij vulnerable to stack exhaustion

HOCH 7.5CVE-2023-34614 · GHSA-66gv-5m8q-rrjc · Published 14/06/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-34614 ist eine Schwachstelle (HOCH (CVSS 7.5)) in cc.plural:jsonij, jsonij (jsonij project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.84%, höher als bei 58.2% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
cc.plural:jsonij Maven	`≤ 0.5.2`	No fix yet
jsonij jsonij_project	`≤ 0.5.2`	No fix yet

Description

An issue was discovered jmarsden/jsonij through 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

NVD description

An issue was discovered jmarsden/jsonij thru 0.5.2 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

References

nvd.nist.gov/vuln/detail/CVE-2023-34614 · ADVISORY
bitbucket.org/jmarsden/jsonij · PACKAGE
bitbucket.org/jmarsden/jsonij/issues/7/stack-overflow-error-caused-by-jsonij · WEB

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free