CVE-2023-3894
DOS in jackson-dataformats-text
概要
DOS in jackson-dataformats-text
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web bugs.chromium.org
- web github.com