Lucene search
Redhat.comRH:CVE-2023-33008HistoryAug 11, 2023 - 7:48 p.m.
CVE-2023-33008
2023-08-1119:48:54
redhat.com
access.redhat.com
44
apache johnzon
json input
bigdecimal
denial of service
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
0.002 Low
EPSS
Percentile
53.1%
A flaw was found in Apache Johnzon. This issue could allow an attacker to craft a specific JSON input that Johnzon will deserialize into a BigDecimal, which Johnzon may use to start converting large numbers, resulting in a denial of service.
Related
veracode
veracode
Denial Of Service (DoS)
2023-07-13 14:53:12
cve
cve
CVE-2023-33008
2023-07-07 10:15:09
ibm
ibm
Security Bulletin: IBM Datapower Operations Dashboard to a denial of service caused by an unsafe deserialization flaw
2024-02-07 17:18:36
prion
prion
Deserialization of untrusted data
2023-07-07 10:15:00
cnvd
cnvd
Apache Johnzon Denial of Service Vulnerability
2023-07-11 00:00:00
osv
osv
CVE-2023-33008
2023-07-07 10:15:09
Apache Johnzon Deserialization of Untrusted Data vulnerability
2023-07-07 12:30:22
cvelist
cvelist
nvd
nvd
CVE-2023-33008
2023-07-07 10:15:09
github
github
Apache Johnzon Deserialization of Untrusted Data vulnerability
2023-07-07 12:30:22
redhat
redhat
5.3 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
0.002 Low
EPSS
Percentile
53.1%
Related for RH:CVE-2023-33008