CVEvulnerability
CVE-2021-23900
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-01-13
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.
Affected configurations
• owasp json-sanitizer (< 1.2.2)
References
- https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e Patch, Third Party Advisory
- https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2 Patch, Third Party Advisory
- https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0 Third Party Advisory
- https://github.com/OWASP/json-sanitizer/commit/a37f594f7378a1c76b3283e0dab9e1ab1dc0247e Patch, Third Party Advisory
- https://github.com/OWASP/json-sanitizer/compare/v1.2.1...v1.2.2 Patch, Third Party Advisory
- https://groups.google.com/g/json-sanitizer-support/c/dAW1AeNMoA0 Third Party Advisory