CVE-2021-23900

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input

published January 13, 2021

CVSS
—
EPSS
2%
Percentile
81.8
In the wild
Unconfirmed
What it is

OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02125 · 81.8th percentile
Published
2021-01-13T15:50Z
EPSS history
Timeline
  • 13 JAN 15:50Z
    OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input
    cvelistv5