GHSA-WHGH-G24C-3J5Q hutool-json stack overflow vulnerability

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

Stack overflow

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

Design/Logic Flaw

hutool-json v5.8.10 was discovered to contain an out of memory error...

Stack overflow

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

hutool-json stack overflow vulnerability

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

hutool-json vulnerable to memory exhaustion

hutool-json v5.8.10 was discovered to contain an out of memory error...

Hutool 缓冲区错误漏洞

Hutool is a small but comprehensive library of Java tools for the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.10, which originates from a stack overflow in the XML.toJSONObject component and allows attackers to cause a denial of service DoS via crafted JSON o...

PT-2022-6900

Name of the Vulnerable Software and Affected Versions hutool-json version 5.8.10 org.json:json versions prior to 20230227 Bitbucket Data Center and Server versions 7.17.0 through 8.12.0 Description A stack overflow in the XML.toJSONObject component allows attackers to cause a Denial of Service Do...

hutool-json stack overflow vulnerability

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

PT-2022-6898 · Unknown · Hutool-Json

Name of the Vulnerable Software and Affected Versions: hutool-json version 5.8.10 Description: The issue is related to a stack overflow in the org.json.JSONTokener.nextValue component of the hutool-json library, which can be exploited to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45688

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

CVE-2022-45688

CVE-2022-45688 : Hutool-JSON's XML.toJSONObject has a stack-based overflow that can cause a DoS via crafted JSON/XML data. The connected documents confirm the vulnerability and impact (availability impact: HIGH) with no public exploit details or remediation/version fixes provided in the supplied ...

Hutool 缓冲区错误漏洞

Hutool is a small but comprehensive library of Java tools for the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.10, which stems from the inclusion of an out-of-memory error...

CVE-2022-45689

CVE-2022-45689 concerns hutool-json v5.8.10, where an out-of-memory condition can be triggered, leading to denial of service. Public sources (Red Hat, Veracode, OSV, GHSA, CNNVD, NVD) consistently describe memory exhaustion as the issue, with the impact described as crash/DoS. No concrete remedia...

CVE-2022-45690

CVE-2022-45690: hutool-json v5.8.10 is affected by a stack overflow in org.json.JSONTokener.nextValue, enabling Denial of Service via crafted JSON or XML data. Connected sources corroborate the vulnerability and note a PoC exists. No remediation details are provided in the supplied documents.