CVE-2023-7272CWE-787

Eclipse Parsson stack overflow with deeply nested objects

High · published July 17, 2024

CVSS v3.1
8.6
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00588 · 47.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2024-07-17T15:00Z
EPSS history
Timeline
  • 17 JUL 15:00Z
    Eclipse Parsson stack overflow with deeply nested objects
    cvelistv5