Description
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Remediation
References
https://github.com/dromara/hutool/issues/2746
https://github.com/stleary/JSON-java/issues/654
Related Vulnerabilities
CVE-2019-10747 Vulnerability in maven package org.webjars.npm:set-value
CVE-2020-11020 Vulnerability in maven package org.webjars.npm:faye
CVE-2020-7699 Vulnerability in npm package express-fileupload
CVE-2021-3807 Vulnerability in npm package ansi-regex
CVE-2022-35949 Vulnerability in maven package org.webjars.npm:undici