CVE-2023-7272
Eclipse Parsson stack overflow with deeply nested objects
Résumé
Eclipse Parsson stack overflow with deeply nested objects
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Références
- advisory github.com
- advisory nvd.nist.gov
- report gitlab.eclipse.org