CVE-2021-27568
⚪ Do wiadomości
Nieobsłużony wyjątek w json-smart może prowadzić do awarii aplikacji lub ujawnienia danych.
CVSS
5.9
EPSS
2.9%
Exploit
poc
Vendor
oracle
Opis źródłowy (NVD)
An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.
exploit
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 5.9 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 2.9% |
| Opublikowano (NVD) | 2021-02-23 02:15:12 UTC |
| Ostatnia modyfikacja (NVD) | 2026-10-08 22:17:08 UTC |
Referencje
- https://github.com/netplex/json-smart-v1/issues/7 ([email protected]) [Exploit, Third Party Advisory]
- https://github.com/netplex/json-smart-v2/issues/60 ([email protected]) [Exploit, Third Party Advisory]
- https://lists.apache.org/thread.html/rb6287f5aa628c8d9af52b5401ec6cc51b6fc28ab20d318943453e396%40%3Ccommits.druid.apache.org%3E ([email protected])
- https://lists.apache.org/thread.html/re237267da268c690df5e1c6ea6a38a7fc11617725e8049490f58a6fa%40%3Ccommits.druid.apache.org%3E ([email protected])
- https://lists.apache.org/thread.html/rf70210b4d63191c0bfb2a0d5745e104484e71703bf5ad9cb01c980c6%40%3Ccommits.druid.apache.org%3E ([email protected])
- https://www.oracle.com//security-alerts/cpujul2021.html ([email protected]) [Patch, Third Party Advisory]
- https://www.oracle.com/security-alerts/cpuapr2022.html ([email protected]) [Patch, Third Party Advisory]
- https://www.oracle.com/security-alerts/cpujan2022.html ([email protected]) [Patch, Third Party Advisory]