← Back

CVE-2022-25024

nvd nist
Published: Aug 22, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

The json2xml package through 3.12.0 for Python allows an error in typecode decoding enabling a remote attack that can lead to an exception, causing a denial of service.

Affected (1)

Products: Vinitkumar: Json2xml
Vinitkumar
1 product
Json2xml
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Json2xml
Up to 3.12.0

Related CWEs

CWE-754
Improper Check for Unusual or Exceptional Conditions
The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

References (8)

Source: cve@mitre.org
ExploitIssue TrackingPatch
Source: cve@mitre.org
Issue TrackingPatch
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Product
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitIssue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Issue TrackingPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Product

Timeline

No history available yet.