Description
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Remediation
References
https://github.com/dromara/hutool/issues/2746
https://github.com/stleary/JSON-java/issues/654
Related Vulnerabilities
CVE-2020-36188 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind
CVE-2021-21254 Vulnerability in npm package @ckeditor/ckeditor5-markdown-gfm
CVE-2023-24620 Vulnerability in maven package com.esotericsoftware.yamlbeans:yamlbeans
CVE-2022-23496 Vulnerability in maven package nl.basjes.parse.useragent:yauaa