CVE-2022-39259
Low
Description
jadx is a set of command line and GUI tools for producing Java source code from Android Dex and Apk files. versions prior to 1.4.5 are subject to a Denial of Service when opening zip files with HTML sequences. This issue has been patched in version 1.4.5. There are no known workarounds.
SeverityLow
CVSS3.3
Exploit probability—
ProductJadx
PublishedOct 21, 2022
First seenOct 21, 2022
Weakness typeCWE-20Improper input validation
How to fix
Update
- jadx_project jadx1.4.5 or later
- io.github.skylot:jadx-plugins-api1.4.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jadx_project jadx | v < 1.4.5 | 1.4.5 |
| io.github.skylot:jadx-plugins-apiMaven | v < 1.4.5 | 1.4.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.