Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2023-7272

Eclipse Parsson stack overflow with deeply nested objects

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
eclipse

Description

In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Eclipse Foundation Parsson

Default version status: unaffected

  • 0 to ≤ 1.0.3affected
  • 1.1.0 to ≤ 1.1.2affected

References