Description

An issue was discovered ph-json thru 9.5.5 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

Remediation

References

https://github.com/phax/ph-commons/issues/35

Related Vulnerabilities

CVE-2013-2071 Vulnerability in maven package org.apache.tomcat.embed:tomcat-embed-core

CVE-2022-36097 Vulnerability in maven package org.xwiki.platform:xwiki-platform-attachment-ui

CVE-2020-7961 Vulnerability in maven package com.liferay.portal:portal-impl

CVE-2017-16026 Vulnerability in npm package request

CVE-2023-40347 Vulnerability in maven package org.jenkins-ci.plugins:maven-artifact-choicelistprovider

Severity

High

Classification

CWE-787 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Exploit Issue Tracking Third Party Advisory