Vulnerability Database
296,202
Total vulnerabilities in the database
CVE-2023-1436
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
| Software | From | Fixed in |
|---|---|---|
| jettison_project / jettison | - | 1.5.4 |
org.codehaus.jettison / jettison
|
- | 1.5.4 |
- https://github.com/jettison-json/jettison/issues/60
- https://github.com/jettison-json/jettison/pull/62
- https://github.com/jettison-json/jettison/releases/tag/jettison-1.5.4
- https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911
- https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/