GitHub Advisoryadvisory · Maven

GHSA-8rf5-92jh-3vc9 Uncaught Exception leading to Denial of Service in json-sanitizer

HIGH Published 2021-05-13 Modified 2021-04-06 Official page ↗
Aliases
CVE-2021-23900
Ecosystem
Maven
Packages
com.mikesamuel:json-sanitizer
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-248
Reviewed
2021-04-06

Affected packages

• Maven com.mikesamuel:json-sanitizer: < 1.2.2 → fixed in 1.2.2

Description

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.

Related

Alias · CVE (1)

  • CVE-2021-23900 OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. vulnerability

Weakness · CWE (1)

  • CWE-248 Uncaught Exception weakness

References