Vulnerabilities > CVE-2022-45688 - Out-of-bounds Write vulnerability in multiple products

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

hutool

json-java-project

CWE-787

NVD

Published: 2022-12-13

Updated: 2023-03-09

Summary

A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

Vulnerable Configurations

Part	Description	Count
Application	Hutool Hutool Hutool 5.8.10	1
Application	Json-Java_Project Json Java Project Json Java - Json Java Project Json Java 20150729 Json Java Project Json Java 20151123 Json Java Project Json Java 20160212 Json Java Project Json Java 20160807 Json Java Project Json Java 20160810 Json Java Project Json Java 20170516 Json Java Project Json Java 20171018 Json Java Project Json Java 20180130 Json Java Project Json Java 20180813 Json Java Project Json Java 20190722 Json Java Project Json Java 20200518 Json Java Project Json Java 20201115 Json Java Project Json Java 20210307 Json Java Project Json Java 20211205 Json Java Project Json Java 20220320 Json Java Project Json Java 20220924	17

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

Summary

Vulnerable Configurations

Common Weakness Enumeration (CWE)

References