Description
An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
Remediation
References
https://research.jfrog.com/vulnerabilities/jettison-json-array-dos-xray-427911/
Related Vulnerabilities
CVE-2020-26302 Vulnerability in npm package is_js
CVE-2021-25931 Vulnerability in maven package org.opennms:opennms-webapp
CVE-2021-21290 Vulnerability in maven package io.netty:netty-transport-native-epoll
CVE-2022-26585 Vulnerability in maven package net.mingsoft:ms-mcms
CVE-2020-28501 Vulnerability in npm package es6-crawler-detect