CVE-2023-1436 — Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray

CVE-2023-1436

Infinite recursion in Jettison leads to denial of service when creating a crafted JSONArray PUBLISHED

Description (CNA)

An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.

Affected (CNA)

Vendor / product	Versions
jettison / jettison	affected 0 before 1.5.4

CWE

CWE-674

References

https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/

ADP enrichment

CVE

No English description supplied.

https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/

CISA-ADP

No English description supplied.

No references supplied.