Information disclosure

2021-02-2302:15:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.01 Low

EPSS

Percentile

83.4%

JSON

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

CPENameOperatorVersion
json-smart-v1lt1.3.2
json-smart-v2lt2.3.1
json-smart-v2ge2.4
json-smart-v2lt2.4.1
communications_cloud_native_core_policyeq1.14.0
oss_support_toolslt2.12.42
peoplesoft_enterprise_peopletoolseq8.58
peoplesoft_enterprise_peopletoolseq8.59
utilities_frameworkeq4.4.0.0.0
utilities_frameworkeq4.4.0.2.0

Name	Operator	Version
json-smart-v1	lt	1.3.2
json-smart-v2	lt	2.3.1
json-smart-v2	ge	2.4
json-smart-v2	lt	2.4.1
communications_cloud_native_core_policy	eq	1.14.0
oss_support_tools	lt	2.12.42
peoplesoft_enterprise_peopletools	eq	8.58
peoplesoft_enterprise_peopletools	eq	8.59
utilities_framework	eq	4.4.0.0.0
utilities_framework	eq	4.4.0.2.0