Denial of Service Vulnerability in JSON Smart by Netplex
CVE-2021-31684

7.5HIGH

Key Information:

Vendor

Json-smart Project

Status
Json-smart-v1
Json-smart-v2
Vendor
CVE Published:
1 June 2021

What is CVE-2021-31684?

A vulnerability was identified in the indexOf function of JSONParserByteArray within JSON Smart versions 1.3 and 2.4, potentially leading to denial of service (DOS) when exploited through specially crafted web requests. This can disrupt the normal functionality of applications relying on this library, making it essential for users to implement security patches and updates promptly.

References

https://github.com/netplex/json-smart-v1/issues/10
https://github.com/netplex/json-smart-v1/pull/11
https://github.com/netplex/json-smart-v2/issues/67

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.