Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2023-7272

Good to know:

icon
icon

Date: July 17, 2024

In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.

Language: Java

Severity Score

Related Resources (7)

https://nvd.nist.gov/vuln/detail/CVE-2023-7272
https://github.com/eclipse-ee4j/parsson/commit/d0ec79badd44a940c82842954430762a2199f4e1
https://github.com/eclipse-ee4j/parsson/commit/755d2a86dff74fecc4114fbe7d21e071380c4e45
https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/12
https://github.com/eclipse-ee4j/parsson/issues/91
https://github.com/eclipse-ee4j/parsson
https://www.mend.io/vulnerability-database/CVE-2023-7272

Severity Score

Weakness Type (CWE)

Out-of-bounds Write

CWE-787

Top Fix

icon

Upgrade Version

Upgrade to version org.eclipse.parsson:jakarta.json:1.0.4,1.1.3, org.eclipse.parsson:parsson:1.0.4,1.1.3

Learn More

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): NONE
User Interaction (UI): NONE
Scope (S): CHANGED
Confidentiality (C): NONE
Integrity (I): NONE
Availability (A): HIGH

Do you need more information?

Contact Us