json stack overflow vulnerability

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-45688 · ADVISORY
• dromara/hutool · WEB
• stleary/JSON-java · WEB
• dromara/hutool commit 6a2b585 · WEB
• stleary/JSON-java commit a6e412b · WEB
• dromara/hutool release 5.8.25 · WEB

Lỗ hổng khác của cn.hutool:hutool-json

• CVE-2023-42278CAO 7.5hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
• CVE-2023-42277NGHIÊM TRỌNG 9.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
• CVE-2023-42276NGHIÊM TRỌNG 9.8hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
• CVE-2022-45690CAO 7.5A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial…
• CVE-2022-45689CAO 7.5hutool-json v5.8.10 was discovered to contain an out of memory error.