CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

json-lib: Mishandling of an unbalanced comment string in json-lib

A flaw was found in JSON-lib's JSONTokener component. This vulnerability allows a denial of service via an unbalanced comment string...

json-lib: Mishandling of an unbalanced comment string in json-lib

A flaw was found in JSON-lib's JSONTokener component. This vulnerability allows a denial of service via an unbalanced comment string...

spring-boot:ConfigurationMetadataRepositoryJsonBuilderFuzzer: Security exception in org.json.JSONTokener.nextValue

Detailed Report: https://oss-fuzz.com/testcase?key=6587677827203072 Project: spring-boot Fuzzing Engine: libFuzzer Fuzz Target: ConfigurationMetadataRepositoryJsonBuilderFuzzer Job Type: libfuzzerasanspring-boot Platform Id: linux Crash Type: Security exception Crash Address: Crash State:...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

JSON-lib 安全漏洞

Json-lib is a java library open-sourced by Kordamp. It is used to convert beans, maps, collections, java arrays and XML to JSON and back to beans and DynaBeans. A security vulnerability exists in JSON-lib versions prior to 3.1.0, which stems from util/JSONTokener.java incorrectly handling...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

hutool-json JSONTokener Heap Buffer Overflow DoS

The vulnerability in the org.json.JSONTokener.nextValue::JSONTokener.java component of the file and network operations library hutool-json is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failures...

twitter4j:TwitterObjectFactoryFuzzer: Security exception in twitter4j.JSONTokener.nextValue

Project: https://github.com/Twitter4J/Twitter4J.git Detailed Report: https://oss-fuzz.com/testcase?key=4559975576633344 Project: twitter4j Fuzzing Engine: libFuzzer Fuzz Target: TwitterObjectFactoryFuzzer Job Type: libfuzzerasantwitter4j Platform Id: linux Crash Type: Security exception Crash...

OSV-2023-60 Security exception in org.json.JSONTokener.nextValue

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=55978 Crash type: Security exception Crash state: org.json.JSONTokener.nextValue org.json.JSONTokener.readArray org.json.JSONTokener.nextToInternal...

Denial Of Service (DoS)

hutool-json is vulnerable to denial of service.The vulnerability is due to the JSONTokener.nextValue method causing a stack overflow which allows an attacker to cause an application crash via malicious input...

hutool-json stack overflow vulnerability

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

CVE-2022-45690: hutool-json v5.8.10 is affected by a stack overflow in org.json.JSONTokener.nextValue, enabling Denial of Service via crafted JSON or XML data. Connected sources corroborate the vulnerability and note a PoC exists. No remediation details are provided in the supplied documents.

hutool-json stack overflow vulnerability

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

jettison:JsonFuzzer: Security exception in org.codehaus.jettison.json.JSONTokener.newJSONObject

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=6634592873873408 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Security exception Crash Address: Crash...

Denial Of Service (DoS)

Jettison is vulnerable to denial of service. The vulnerability exists in nextValue function in JSONTokener.java where the attacker may supply content that causes the parser to crash by out of memory if the parser is running on user supplied input...

jettison:JsonFuzzer: Security exception in org.codehaus.jettison.json.JSONTokener.newJSONArray

Project: https://github.com/jettison-json/jettison.git Detailed Report: https://oss-fuzz.com/testcase?key=5680849097457664 Project: jettison Fuzzing Engine: libFuzzer Fuzz Target: JsonFuzzer Job Type: libfuzzerasanjettison Platform Id: linux Crash Type: Security exception Crash Address: Crash...