CVE-2023-1436
1 advisory.
Maven/org.codehaus.jettison:jettison CVE-2023-1436: high 7.5
Jettison vulnerable to infinite recursion
Action: Upgrade org.codehaus.jettison:jettison to 1.5.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.5.4 | - |
Fixed versions
| 1.5.4 |
Sources
- osv: GHSA-q6g2-g7f3-rr83
- https://nvd.nist.gov/vuln/detail/CVE-2023-1436
- https://github.com/jettison-json/jettison/issues/60
- https://github.com/jettison-json/jettison/pull/62
- https://github.com/jettison-json/jettison
- https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4
- https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911
CVE-2023-1436 · published · modified · JSON