🔐 CVE-2023-7272: org.glassfish:javax.json:jar:1.1.4:runtime

[github-actions]

Summary

In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.

CVE: CVE-2023-7272
CWE: CWE-787

References

• https://ossindex.sonatype.org/vulnerability/CVE-2023-7272?component-type=maven&component-name=org.glassfish%2Fjavax.json&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
• http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2023-7272
• https://gitlab.eclipse.org/security/vulnerability-reports/-/issues/12