Lucene search

GoogleOSV:CVE-2022-45689

HistoryDec 13, 2022 - 3:15 p.m.

CVE-2022-45689

2022-12-1315:15:11

Google

osv.dev

cve-2022-45689

software vulnerability

hutool-json v5.8.10

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

41.2%

JSON

hutool-json v5.8.10 was discovered to contain an out of memory error.

CPENameOperatorVersion
hutooleq5.7.7
hutooleq5.2.1
hutooleq5.7.22
hutooleq5.5.8
hutooleq5.4.1
hutooleq5.5.9
hutooleq5.6.0
hutooleq5.3.10
hutooleq5.7.17
hutooleq5.7.5

Name	Operator	Version
hutool	eq	5.7.7
hutool	eq	5.2.1
hutool	eq	5.7.22
hutool	eq	5.5.8
hutool	eq	5.4.1
hutool	eq	5.5.9
hutool	eq	5.6.0
hutool	eq	5.3.10
hutool	eq	5.7.17
hutool	eq	5.7.5

Rows per page:

1-10 of 1001

References

github.com/dromara/hutool/issues/2747

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

41.2%

JSON

Related for OSV:CVE-2022-45689