CVE-2023-7272
Eclipse Parsson stack overflow with deeply nested objects
Summary
Eclipse Parsson stack overflow with deeply nested objects
Original description
The description as published by the source.
In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
References
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.eclipse.org