Lucene search

Veracode Vulnerability DatabaseVERACODE:46312

HistoryApr 10, 2024 - 9:21 a.m.

NULL Pointer Dereference

2024-04-1009:21:20

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

vulnerability

threeten backport

localdate

compareto

nullpointerexception

missing null value checks

software

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.8%

JSON

ThreeTen Backport is vulnerable to NULL Pointer Dereference. The vulnerability is due to missing null value checks in the org.threeten.bp.LocalDate::compareTo(ChronoLocalDate) method, resulting in a NullPointerException if an attacker can pass a null value to the method.

CPENameOperatorVersion
threeten backportle1.6.9
threeten backportle1.6.9

CPE	Name	Operator	Version
	threeten backport	le	1.6.9
	threeten backport	le	1.6.9

References

threeten.com

gist.github.com/LLM4IG/3cc9183dcd887020368a0bafeafec5e3

github.com/ThreeTen/threetenbp

github.com/ThreeTen/threetenbp/blob/main/src/main/java/org/threeten/bp/LocalDate.java#L1671