CVE-2024-23080

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale)

Critical · published April 10, 2024

CVSS v3.1
9.1
EPSS
1%
Percentile
57.1
In the wild
Unconfirmed
What it is

🔥 A NullPointerException lurking in Joda Time v2.12.5 could leave you in a bit of a bind! Think of it like a recipe that suddenly forgets a key ingredient halfway through cooking, leading to a major kitchen disaster — the dish may turn out inedible! If exploited, this vulnerability could disrupt the time management functions crucial for applications relying on accurate date and time calculations. Imagine your app failing to process time-related data correctly, potentially throwing schedules and operations into chaos. Not only could this affect user experience, but it could also damage your reputation!

Put simply

Think of it like a recipe that suddenly forgets a key ingredient halfway through cooking, leading to a major kitchen disaster — the dish may turn out inedible! The vulnerability arises from a NullPointerException in the method org.joda.time.format.PeriodFormat::wordBased(Locale), which can lead to unexpected application behavior when certain conditions are met.

What to do

If exploited, this vulnerability could disrupt the time management functions crucial for applications relying on accurate date and time calculations. Imagine your app failing to process time-related data correctly, potentially throwing schedules and operations into chaos. Not only could this affect user experience, but it could also damage your reputation! While this isn't confirmed as widely exploited, it’s wise to patch your Joda Time library to the latest version immediately. Keep an eye on updates and community discussions to see if further developments arise regarding this disputed vulnerability. You've got this! Stay vigilant and keep your applications running smoothly! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00830 · 57.1th percentile
Published
2024-04-10T00:00Z
EPSS history
Timeline
  • 10 APR 00:00Z
    Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale)
    cvelistv5