Jettison Out-of-bounds Write vulnerability

ALTO 7.5CVE-2022-45693 · GHSA-grr4-wv38-f68w · Published 13/12/2022 · updated 17/06/2026

Em resumo

CVE-2022-45693 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta org.codehaus.jettison:jettison, jettison (jettison project).
Chance de exploração nos próximos 30 dias (EPSS): 1.5%, maior que 74.2% das vulnerabilidades.
Correção: atualize para 1.5.2 ou posterior.

Package	Affected versions	Patched versions
org.codehaus.jettison:jettison Maven	`< 1.5.2`	`1.5.2`
jettison jettison_project	`< 1.5.2`	`1.5.2`

Description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

NVD description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

References

nvd.nist.gov/vuln/detail/CVE-2022-45693 · ADVISORY
jettison-json/jettison · WEB
jettison-json/jettison · PACKAGE
lists.debian.org/debian-lts-announce/2022/12/msg00045.html · WEB
debian.org/security/2023/dsa-5312 · WEB

Mais vulnerabilidades de org.codehaus.jettison:jettison

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.codehaus.jettison:jettison

Maven

< 1.5.2

1.5.2

jettison

jettison_project

< 1.5.2

1.5.2

Description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

NVD description

Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted string.

Mais vulnerabilidades de org.codehaus.jettison:jettison

Ver tudo →