CVE-2023-1370

Data: 2023-03-18

Severity: High

CVSS Score: 7.5 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Riferimenti: https://ossindex.sonatype.org/vulnerability/CVE-2023-1370

Libreria: net.minidev:json-smart <= 2.4.8

Descrizione

CWE-400: Uncontrolled Resource Consumption (“Resource Exhaustion”)

json-smart - Denial of Service (DoS)

GovWay

Versione affette: <= 3.3.11

Risoluzione: 3.3.12