GitHub Advisoryadvisory · Maven

GHSA-whgh-g24c-3j5q hutool-json stack overflow vulnerability

MEDIUM Published 2022-12-13 Modified 2022-12-13 Official page ↗
Aliases
CVE-2022-45690
Ecosystem
Maven
Packages
cn.hutool:hutool-json
Severity
Moderate
Reviewed
2022-12-13

Affected packages

• Maven cn.hutool:hutool-json: < 5.8.11 → fixed in 5.8.11

Description

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

Related

Alias · CVE (1)

  • CVE-2022-45690 A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a… vulnerability

References