Denial of Service Vulnerability in ini4j Library by Takuya Ueda
CVE-2022-41404
7.5HIGH
Key Information:
- Vendor
Ini4j Project
- Status
- Vendor
- CVE Published:
- 11 October 2022
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2022-41404?
A vulnerability exists in the fetch() method of the BasicProfile class within the ini4j library that can be exploited by attackers to trigger a Denial of Service (DoS) condition. This can occur through various unspecified vectors, ultimately incapacitating the application that relies on this library. Users utilizing this library, particularly in critical Java applications, are urged to update to version 0.5.4 or later to ensure protection against potential exploitation.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.