Description

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

Remediation

References

CVE-2021-27568

Related Vulnerabilities

Jenkins Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000997)

Twisted Web HTTP Server Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2019-12387)

Drupal Other Vulnerability (CVE-2006-5475)

Oracle Application Server CVE-2009-1011 Vulnerability (CVE-2009-1011)

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Security Bypass (8.9)

Severity

Medium

Classification

CVE-2021-27568 CWE-754 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Tags

Missing Update Known Vulnerabilities