Description

An issue in the fetch() method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Remediation

References

https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html

https://sourceforge.net/p/ini4j/bugs/56/

Related Vulnerabilities

CVE-2021-23377 Vulnerability in npm package onion-oled-js

CVE-2018-12537 Vulnerability in maven package io.vertx:vertx-core

CVE-2020-13973 Vulnerability in maven package com.mikesamuel:json-sanitizer

CVE-2018-14627 Vulnerability in maven package org.wildfly:wildfly-feature-pack

CVE-2021-23330 Vulnerability in npm package launchpad

Severity

High

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Mailing List Third Party Advisory Exploit NVD-CWE-noinfo