Lucene search

K
osvGoogleOSV:CVE-2023-5072
HistoryOct 12, 2023 - 5:15 p.m.

CVE-2023-5072

2023-10-1217:15:10
Google
osv.dev
11
cve-2023-5072
denial of service
json-java
parser
memory
bug
software

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.8%

Denial of Service in JSON-Java versions up to and including 20230618.  A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.