org.mentaframework:mentawai (>=1.7, <=1.10.1) potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (0.7.1)

net.sf.json-lib:json-lib MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - org.mentaframework:mentawai =1.7, =1.10.1 Source cves: CVE-2024-47855 Source advisory: OSV:GHSA-WWCP-26WC-3FXM...

com.github.andy2003:application (1.0), com.github.andy2003:kayak-mapview (1.0) +17 more potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (0.9)

net.sf.json-lib:json-lib MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - com.github.andy2003:application 1.0 - com.github.andy2003:kayak-mapview 1.0 -...

GHSA-WWCP-26WC-3FXM JSON-lib mishandles an unbalanced comment string

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

org.jvnet.hudson.main:hudson-core (>=1.92, <=1.100), org.jvnet.hudson.main:hudson-war (>=1.92, <=1.100) +1 more potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (1.0.1)

net.sf.json-lib:json-lib MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - org.jvnet.hudson.main:hudson-core =1.92, =1.92, =1.100 - org.springmodules:spring-modules-xt 0.8a Source cves:...

com.testingbot:testingbottunnel (>=1.0, <=1.7), testingbot:testingbot (>=1.4, <=1.5) potentially affected by CVE-2024-47855 via net.sf.json-lib:json-lib (1.0)

net.sf.json-lib:json-lib MAVEN version 1.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sf.json-lib:json-lib and may be impacted: - com.testingbot:testingbottunnel =1.0, =1.4, =1.5 Source cves: CVE-2024-47855 Source advisory:...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855: Undefined Security Weakness

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

JSON-lib security vulnerabilities

Json-lib is a java library open-sourced by Kordamp. It is used to convert beans, maps, collections, java arrays and XML to JSON and back to beans and DynaBeans. A security vulnerability exists in JSON-lib versions prior to 3.1.0, which stems from util/JSONTokener.java incorrectly handling...

CVE-2024-47855

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string...

CVE-2024-47855

The Java library JSON-lib is vulnerable due to improper syntax validation in util/JSONTokener.java before version 3.1.0 . The component mishandles an unbalanced comment string, which can be exploited remotely to trigger service failures or a Denial of Service (DoS) condition. This issue affects v...

K27638900: Apache Struts vulnerability CVE-2017-15707

Security Advisory Description In Apache Struts 2.5 to 2.5.14, the REST Plugin is using an outdated JSON-lib library which is vulnerable and allow perform a DoS attack using malicious request with specially crafted JSON payload. CVE-2017-15707 Impact There is no impact; F5 products are not affecte...

CVE-2019-0188

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

Security Bulletin: IBM Tivoli Netcool Impact is affected by an Apache Camel vulnerability (CVE-2019-0188)

Summary IBM Tivoli Netcool Impact has addressed the following Apache Camel vulnerability. Vulnerability Details CVEID: CVE-2019-0188 DESCRIPTION: Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library...

XML External Entity injection in Apache Camel

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

CVE-2019-0188

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...

Xxe

Apache Camel prior to 2.24.0 contains an XML external entity injection XXE vulnerability CWE-611 due to using an outdated vulnerable JSON-lib library. This affects only the camel-xmljson component, which was removed...