CVE-2023-31441
In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanitizeJson an...
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In NATO Communications and Information Agency anet (aka Advisor Network) through 3.3.0, an attacker can provide a crafted JSON file to sanitizeJson and cause an exception. This is related to the U+FFFD Unicode replacement character. A for loop does not consider that a data structure is being modified during loop execution.
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web github.com