2 matches found
OESA-2023-1963 jettison security update
Jettison is a collection of Java APIs like STaX and DOM which read and write JSON. This allows nearly transparent enablement of JSON based web services in services frameworks like CXF or XML serialization frameworks like XStream. Security Fixes: An infinite recursion is triggered in Jettison when...
7.5CVSS8.1AI score0.01009EPSS
SaveExploits1References2
SUSE-SU-2023:1948-1 Security update for jettison
This update for jettison fixes the following issues: Upgrade to version 1.5.4: - CVE-2023-1436: Fixed infinite recursion triggered when constructing a JSONArray from a Collection bsc1209605...
7.5CVSS7.5AI score0.01009EPSS
SaveExploits1References3
20