Jettison vulnerable to infinite recursion

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2023-1436 · ADVISORY
• jettison-json/jettison · WEB
• jettison-json/jettison#62 · WEB
• jettison-json/jettison · PACKAGE
• jettison-json/jettison release jettison-1.5.4 · WEB
• research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911 · WEB
• research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911 · Exploit

org.codehaus.jettison:jettison のその他の脆弱性

• CVE-2022-45693高 7.5Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Deni…
• CVE-2022-45685高 7.5A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.
• CVE-2022-40150高 7.5Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on u…
• CVE-2022-40149高 7.5Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on u…