Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: Google

Published: 2022-09-16T00:00:00

Updated: 2024-08-03T12:14:39.950Z

Reserved: 2022-09-07T00:00:00

Link: CVE-2022-40149

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2022-09-16T10:15:09.677

Modified: 2024-11-21T07:20:58.857

Link: CVE-2022-40149

cve-icon Redhat

Severity : Moderate

Publid Date: 2022-09-20T00:00:00Z

Links: CVE-2022-40149 - Bugzilla