Description
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
Remediation
References
https://github.com/dromara/hutool/issues/2746
https://github.com/stleary/JSON-java/issues/654
Related Vulnerabilities
CVE-2023-30522 Vulnerability in maven package org.jenkins-ci.plugins:fogbugz
CVE-2021-39157 Vulnerability in npm package detect-character-encoding
CVE-2008-6504 Vulnerability in maven package com.opensymphony:xwork
CVE-2022-37616 Vulnerability in npm package @xmldom/xmldom
CVE-2021-23356 Vulnerability in npm package kill-process-by-name