CVE-2023-7272: Eclipse Parsson stack overflow with deeply nested objects
In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-7272?
CVE-2023-7272 has a severity rating that indicates it can lead to a denial of service when processing deeply nested JSON documents.
How do I fix CVE-2023-7272?
To fix CVE-2023-7272, update Eclipse Parsson to version 1.0.4 or 1.1.3 or later.
What software is affected by CVE-2023-7272?
CVE-2023-7272 affects Eclipse Parsson versions prior to 1.0.4 and between 1.1.0 and 1.1.2.
What kind of attack does CVE-2023-7272 allow?
CVE-2023-7272 allows attackers to exploit nested object parsing leading to a stack overflow exception.
What is the impact of CVE-2023-7272?
The impact of CVE-2023-7272 is primarily denial of service due to Java stack overflow exceptions.