CVE-2020-36066: High severity gjson vulnerability
Published Jan 5, 2021
·Updated
GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.
Affected Software
2 affected componentsFixes available
go/github.com/tidwall/gjson<1.6.5
1.6.5
Gjson Project Gjson<1.6.5
Event History
Jan 5, 2021
CVE Published
via MITRE·08:41 PM
Data Sourced
via MITRE·08:41 PM
DescriptionSeverity
May 18, 2021
Advisory Published
09:07 PM
Frequently Asked Questions
1
What is CVE-2020-36066?
CVE-2020-36066 is a vulnerability that allows attackers to cause a denial of service (remote) via crafted JSON in GJSON versions prior to 1.6.5.
2
How severe is CVE-2020-36066?
CVE-2020-36066 has a severity score of 7.5, which is considered high.
3
What software is affected by CVE-2020-36066?
GJSON versions prior to 1.6.5 are affected by CVE-2020-36066.
4
How can the CVE-2020-36066 vulnerability be exploited?
The CVE-2020-36066 vulnerability can be exploited by sending crafted JSON payloads to the affected software, causing a denial of service.
5
Is there a fix for CVE-2020-36066?
Yes, the fix for CVE-2020-36066 is to update the GJSON software to version 1.6.5 or later.