Lucene search

K
cvelistJFROGCVELIST:CVE-2023-1436
HistoryMar 16, 2023 - 8:59 p.m.

CVE-2023-1436 Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

2023-03-1620:59:51
CWE-674
JFROG
raw.githubusercontent.com

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

6 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

31.7%