CPanel::JSON::XS Vulnerability Allows for Sensitive Information Disclosure or Denial of Service

CVE-2022-48623

What is CVE-2022-48623?

The Cpanel::JSON::XS package for Perl contains an out-of-bounds access vulnerability that can be exploited by attackers. Specifically, versions prior to 4.33 of this package are susceptible to scenarios where improper access can lead to the exposure of sensitive information or result in a denial of service. This issue arises from flaws in how the package handles bounds checking, which may allow malicious users to manipulate inputs to trigger unexpected behaviors, enabling unauthorized access to data or service interruptions.

References