Em resumo
- CVE-2023-1436 é uma vulnerabilidade ALTO (CVSS 7.5) que afeta org.codehaus.jettison:jettison, jettison (jettison project).
- Chance de exploração nos próximos 30 dias (EPSS): 1.0%, maior que 63.2% das vulnerabilidades.
- Correção: atualize para 1.5.4 ou posterior.
Description
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
NVD description
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
Mais vulnerabilidades de org.codehaus.jettison:jettison
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free