CVE-2023-7272
Eclipse Parsson stack overflow with deeply nested objects
概要
Eclipse Parsson stack overflow with deeply nested objects
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.eclipse.org