CVE-2021-27568

An issue was discovered in netplex json-smart-v1 through 2015-10-23 and json-smart-v2 through 2.4. An exception is thrown from a function, but it is not caught, as demonstrated by NumberFormatException. When it is not caught, it may cause programs using the library to crash or expose sensitive information.

CVSS v3.1 NVD

5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2.0 NVD

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:N/A:P

EPSS

2.90% chance of exploitation in the next 30 days, 87th percentile

Published

2021-02-23

Updated

2026-10-08

Proof-of-concept exploits (1)

• arsalanraja987/java-insecure-random-cve-2021-275680★ · 2025-07-08

Security advisories

• netplex/json-smart-v1/issues/7
• netplex/json-smart-v2/issues/60
• https://www.oracle.com//security-alerts/cpujul2021.html
• https://www.oracle.com/security-alerts/cpuapr2022.html
• https://www.oracle.com/security-alerts/cpujan2022.html
• advisories/GHSA-v528-7hrm-frqp

References

• CVE Record
• NVD entry

Related

• CVE-2020-9488
• CVE-2021-29425
• CVE-2021-29427