Skip to content

hutool-json stack overflow vulnerability

Moderate severity GitHub Reviewed Published Dec 13, 2022 to the GitHub Advisory Database • Updated Jan 29, 2023

Package

maven cn.hutool:hutool-json (Maven)

Affected versions

<= 5.8.10

Patched versions

5.8.11

Description

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

References

Published by the National Vulnerability Database Dec 13, 2022
Published to the GitHub Advisory Database Dec 13, 2022
Reviewed Dec 13, 2022
Last updated Jan 29, 2023

Severity

Moderate

EPSS score

0.100%
(42nd percentile)

Weaknesses

No CWEs

CVE ID

CVE-2022-45690

GHSA ID

GHSA-whgh-g24c-3j5q

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.