hjson stack exhaustion vulnerability
High severity
GitHub Reviewed
Published
to the GitHub Advisory Database
•
Updated
Description
An issue was discovered hjson through 3.0.0 allows attackers to cause a denial of service or other unspecified impacts via crafted objects that deeply nested structures.
References
Published by the National Vulnerability Database
Published to the GitHub Advisory Database
Reviewed
Last updated
Severity
High
/ 10
CVSS v3 base metrics
Attack vector
Network
Attack complexity
Low
Privileges required
None
User interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS score
(51st percentile)
Weaknesses
CVE ID
CVE-2023-34620
GHSA ID
GHSA-5wfc-hjrc-gq87
Source code
No known source code
Credits
-
👁 @achibear
achibear Analyst
See something to contribute?
Suggest improvements for this vulnerability.