Netplex Json-smart Uncontrolled Recursion vulnerability

🗓️ 06 Feb 2025 06:31:26Reported by GitHub Advisory DatabaseType

Security flaw in Netplex Json-smart 2.5.0 to 2.5.1 can lead to Denial of Service attack.

Reporter	Title	Published	Views	Family All 109
IBM Security Bulletins	Security Bulletin: A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1, affects watsonx.data	12 Jun 202510:50	–	ibm
IBM Security Bulletins	Security Bulletin: IBM DevOps Deploy / IBM UrbanCode Deploy (UCD) is susceptible to Denial of Service vulnerability in Json-smart (CVE-2024-57699)	27 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: A denial-of-service attack, heap use after free, network server exploit, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	8 Jul 202517:32	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Transformation Advisor is vulnerable to a vulnerability found in Node.js	6 May 202509:46	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Db2 used by IBM Security Verify Governance has multiple vulnerabilities	23 Feb 202612:30	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerability fixes in IBM webMethods Managed File Transfer On-Prem	22 Dec 202513:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Application Modernization Accelerator is vulnerable to a vulnerability found in Node.js	6 May 202509:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise is vulnerable to a denial of service due to json-smart (CVE-2024-57699)	27 May 202512:14	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM® Db2® affect IBM® Db2® Big SQL on IBM Cloud Pak for Data	23 Jan 202612:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Requirements Management DOORS/DWA vulnerabilities addressed in 9.7.2.10	29 Jul 202522:30	–	ibm

Vulners

Node

net.minidev json-smartRange2.5.0–2.5.2maven

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-57699
github	www.github.com/TurtleLiu/Vul_PoC/tree/main/CVE-2024-57699
nvd	www.nvd.nist.gov/vuln/detail/cve-2023-1370
github	www.github.com/netplex/json-smart-v2/issues/232
github	www.github.com/netplex/json-smart-v2/issues/233
github	www.github.com/netplex/json-smart-v2/issues/236
github	www.github.com/netplex/json-smart-v2/releases/tag/2.5.2
github	www.github.com/advisories/GHSA-pq2g-wx69-c263

12 Mar 2025 14:28Current

7.6High risk

Vulners AI Score7.6

CVSS 3.17.5

EPSS0.00058

SSVC

CWE-674