EUVD-2023-2038

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Deserialization vulnerability in Apache Johnzon allows denial of service with large JSON inputs.

Reporter	Title	Published	Views	Family All 29
IBM Security Bulletins	Security Bulletin: Denial of service vulnerability in Johnzon affects IBM Business Automation Workflow - CVE-2023-33008	4 Apr 202413:25	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Master Data Management vulnerable to denial of service from IBM Business Automation Workflow using Apache Johnzon	2 Oct 202422:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to multiple vulnerabilities	29 Aug 202314:36	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability affect IBM Business Automation Workflow - CVE-2023-33008	3 Aug 202413:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for January 2024.	2 Feb 202408:25	–	ibm
IBM Security Bulletins	Security Bulletin: The Transformation Advisor Tool in IBM App Connect Enterprise is vulnerable to a denial of service due to Apache Johnzon (CVE-2023-33008)	4 Sep 202316:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Datapower Operations Dashboard to a denial of service caused by an unsafe deserialization flaw	7 Feb 202417:07	–	ibm
IBM Security Bulletins	Security Bulletin: Denial of Service vulnerability in Apache Johnzon may affect IBM Business Automation Workflow emitters - CVE-2023-33008	2 Feb 202411:19	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Apache Johnzon may affect IBM Robotic Process Automation and result in a denial of service (CVE-2023-33008)	20 Sep 202314:08	–	ibm
Circl	CVE-2023-33008	7 Jul 202314:31	–	circl

[
  {
    "enisaIdVendor": [
      {
        "id": "a63548d5-730b-3178-ba5e-b9564a52944f",
        "vendor": {
          "name": "Apache Software Foundation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "81199e31-b183-361e-8683-12d260ef2c8f",
        "product": {
          "name": "Apache Johnzon"
        },
        "product_version": "0 ≤1.2.20"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-33008
github	www.github.com/apache/johnzon/commit/34ad9a6b296ae7b4667c3cf0037998e451499ea4
github	www.github.com/apache/johnzon
issues	www.issues.apache.org/jira/browse/JOHNZON-397
lists	www.lists.apache.org/thread/qbg14djo95gfpk7o560lr8wcrzfyw43l

03 Oct 2025 20:07Current

5.6Medium risk

Vulners AI Score5.6

CVSS 3.15.3

EPSS0.00158

SSVC