Description
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Remediation
References
https://github.com/dromara/hutool/issues/2748
https://github.com/stleary/JSON-java/issues/708
Related Vulnerabilities
CVE-2019-10793 Vulnerability in maven package org.webjars.bower:dot-object
CVE-2016-10540 Vulnerability in npm package minimatch
CVE-2021-29445 Vulnerability in npm package jose-node-esm-runtime
CVE-2022-0084 Vulnerability in maven package org.jboss.xnio:xnio-api
CVE-2017-11341 Vulnerability in maven package org.webjars.npm:node-sass