CVE-2021-31684
High
Description
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Json-smart Project Json-smart-v1
PublishedJun 1, 2021
First seenJun 1, 2021
How to fix
Update
- json-smart_project json-smart-v11.3.3 or later
- json-smart_project json-smart-v22.4.4 or later
- net.minidev:json-smart1.3.3, 2.4.4 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| json-smart_project json-smart-v1 | 1.3 ≤ v < 1.3.3 | 1.3.3 |
| json-smart_project json-smart-v2 | 2.4 ≤ v < 2.4.4 | 2.4.4 |
| oracle utilities_framework | 4.4.0.0.0, 4.4.0.2.0, 4.4.0.3.0 | — |
| net.minidev:json-smartMaven | 1.3.0 ≤ v < 1.3.3, 2.4.0 ≤ v < 2.4.4 | 1.3.3, 2.4.4 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.