Description
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Remediation
References
https://github.com/dromara/hutool/issues/2746
https://github.com/stleary/JSON-java/issues/654
Related Vulnerabilities
CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils
CVE-2022-36599 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2023-45818 Vulnerability in npm package tinymce
CVE-2022-24820 Vulnerability in maven package org.xwiki.platform:xwiki-platform-web
CVE-2021-34429 Vulnerability in maven package org.eclipse.jetty:jetty-webapp