CyberSecBulletin

Stleary vulnerabilities

We track 3 vulnerabilities in Stleary products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2023.

3vulnerabilities
0critical
3high
0exploited
7.5average CVSS score

Latest Stleary vulnerabilities

  • 7.5 High severity

    Json-java: Allocation of Resources Without Limits or Throttling

    CVE-2023-5072StlearyEPSS 1.74%

    Denial of Service in JSON-Java versions up to and including 20230618. A bug in the parser means that an input string of modest size can lead to indefinite amounts of memory being used.

  • 7.5 High severity

    Json-java: Out-of-bounds Write

    CVE-2022-45690StlearyEPSS 1.01%

    A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

  • 7.5 High severity

    Hutool: Out-of-bounds Write

    CVE-2022-45688HutoolEPSS 1.26%

    A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.