Skip to content
CVE PROGRAM SOURCE RECORD5.9 Medium

CVE-2023-1436

Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
JFROG

Description

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

jettison jettison

  • 0 to < 1.5.4affected

References