CVE-2022-45690: High severity hutool vulnerability
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-45690?
CVE-2022-45690 is a vulnerability in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 that allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
How does CVE-2022-45690 affect hutool-json?
CVE-2022-45690 affects hutool-json v5.8.10, potentially leading to a Denial of Service (DoS) attack.
What is the severity level of CVE-2022-45690?
CVE-2022-45690 has a severity level of high with a CVSS score of 7.5.
How can an attacker exploit CVE-2022-45690?
An attacker can exploit CVE-2022-45690 by sending crafted JSON or XML data, causing a stack overflow and resulting in a Denial of Service (DoS) attack.
Is there a fix available for CVE-2022-45690?
At this time, there is no known fix for CVE-2022-45690. It is recommended to update to the latest version of hutool-json when a fix becomes available.