A stack overflow in XML.toJSONObject hutool-json v5.8.1
Reporter | Title | Published | Views | Family All 44 |
---|---|---|---|---|
![]() | Stack overflow | 13 Dec 202215:15 | – | prion |
![]() | json stack overflow vulnerability | 13 Dec 202215:30 | – | osv |
![]() | CVE-2022-45688 | 13 Dec 202215:15 | – | osv |
![]() | OPENSUSE-SU-2024:14371-1 json-java-20240303-1.1 on GA media | 27 Sep 202400:00 | – | osv |
![]() | CVE-2022-45688 | 13 Dec 202215:15 | – | nvd |
![]() | Exploit for Out-of-bounds Write in Hutool | 27 Dec 202322:05 | – | githubexploit |
![]() | Exploit for Out-of-bounds Write in Hutool | 29 Dec 202300:14 | – | githubexploit |
![]() | Exploit for Out-of-bounds Write in Hutool | 29 Dec 202302:01 | – | githubexploit |
![]() | Exploit for Out-of-bounds Write in Hutool | 21 Jan 202401:28 | – | githubexploit |
![]() | Exploit for Out-of-bounds Write in Hutool | 28 Dec 202323:52 | – | githubexploit |
Source | Link |
---|---|
github | www.github.com/dromara/hutool/issues/2748 |
github | www.github.com/stleary/JSON-java/issues/708 |
Parameter | Position | Path | Description | CWE |
---|---|---|---|---|
malicious input | request body | XML2JSONConverter | A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data. | CWE-787 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo