Skip to content
Sign in
8.6 High

CVE-2023-7272 In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to…

Description

In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.

Affected products and versions

Product Affected versions Fixed in
Parsson 1.1 1.1.0 → 1.1.2 No fix stated
Parsson 1.0 earliest → 1.0.3 No fix stated
parsson 1.1 1.1.0 → 1.1.2 No fix stated
parsson 1.0 earliest → 1.0.3 No fix stated

Other CVEs of Parsson

The 2 CVEs of Parsson →
CVE-2023-4043 In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to… 5.9 Medium
Track this CVE