CVE-2023-3894
DOS in jackson-dataformats-text
Résumé
DOS in jackson-dataformats-text
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- patch github.com
- web bugs.chromium.org
- web github.com