Lucene search
HistoryDec 13, 2022 - 3:15 p.m.
CVE-2022-45688
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
30.9%
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Affected configurations
Node
hutoolhutoolMatch5.8.10
Node
json-java_projectjson-javaRange<20230227
Related
atlassian
atlassian
hutool-json Vulnerability in Bitbucket Data Center and Server
2023-10-04 19:45:14
osv
osv
json stack overflow vulnerability
2022-12-13 15:30:26
CVE-2022-45688
2022-12-13 15:15:11
prion
prion
Stack overflow
2022-12-13 15:15:00
gitlab
gitlab
hutool-json stack overflow vulnerability
2022-12-13 00:00:00
veracode
veracode
Denial Of Service (DoS)
2022-12-14 05:26:26
cve
cve
CVE-2022-45688
2022-12-13 15:15:11
github
github
json stack overflow vulnerability
2022-12-13 15:30:26
cvelist
cvelist
CVE-2022-45688
2022-12-13 00:00:00
ibm
ibm
broadcom
broadcom
nessus
nessus
Oracle Business Process Management Suite (Oct 2023 CPU)
2023-11-17 00:00:00
Oracle Primavera Gateway (October 2023 CPU)
2023-10-18 00:00:00
Oracle Java SE Multiple Vulnerabilities (July 2023 CPU)
2023-07-19 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - October 2023
2023-10-17 00:00:00
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
30.9%
Related for NVD:CVE-2022-45688