GitHub Advisoryadvisory · Maven

GHSA-jr6h-r7vg-f9mc org.ini4j allows attackers to cause a Denial of Service (DoS)

HIGH Published 2022-10-12 Modified 2025-06-09 Official page ↗
Aliases
CVE-2022-41404
Ecosystem
Maven
Packages
org.ini4j:ini4j
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400
Reviewed
2022-10-18

Affected packages

• Maven org.ini4j:ini4j: <= 0.5.4 (no fix yet)

Description

An issue in the fetch() method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Related

Alias · CVE (1)

  • CVE-2022-41404 An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service… vulnerability

Weakness · CWE (1)

  • CWE-400 Uncontrolled Resource Consumption weakness

References