CVE-2023-3894
DOS in jackson-dataformats-text
Summary
DOS in jackson-dataformats-text
Original description
The description as published by the source.
Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web bugs.chromium.org
- web github.com