GitHub Advisoryadvisory · Maven

GHSA-q6g2-g7f3-rr83 Jettison vulnerable to infinite recursion

HIGH Published 2023-03-22 Modified 2023-03-30 Official page ↗
Aliases
CVE-2023-1436
Ecosystem
Maven
Packages
org.codehaus.jettison:jettison
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-674
Reviewed
2023-03-22

Affected packages

• Maven org.codehaus.jettison:jettison: < 1.5.4 → fixed in 1.5.4

Description

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

Related

Alias · CVE (1)

  • CVE-2023-1436 An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its… vulnerability

Weakness · CWE (1)

  • CWE-674 Uncontrolled Recursion weakness

References