Error Handling and Information Exposure in Netplex JSON-Smart Library
CVE-2021-27568

5.9MEDIUM

Key Information:

Vendor: Json-smart Project
Status: Json-smart-v1; Json-smart-v2
Vendor: CVE Published:; 23 February 2021

🔔 Create Json-smart Project Vulnerability Alert

What is CVE-2021-27568?

An issue in the Netplex json-smart library reveals a critical flaw in error handling where exceptions, such as NumberFormatException, are thrown but not caught. This can lead to application crashes or the unintentional exposure of sensitive information when the library is utilized in a program. Affected versions include json-smart-v1 (up to 2015-10-23) and json-smart-v2 (up to 2.4). It is important for users to review their implementations and apply the necessary updates to mitigate any security risks.