CVE-2021-31684
HIGH 7.5EPSS 2.3%
A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions 1.3 and 2.4 which causes a denial of service (DOS) via a crafted web request.
- CVSS v3.1 NVD
- 7.5 HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P - EPSS
- 2.28% chance of exploitation in the next 30 days, 83rd percentile
- Published
- 2021-06-01
- Updated
- 2024-08-03
Proof-of-concept exploits (1)
- netplex/json-smart-v2/issues/67172★ · 2026-09-22
Security advisories
- netplex/json-smart-v1/pull/11
- https://www.oracle.com/security-alerts/cpujan2022.html
- advisories/GHSA-fg2v-w576-w4v3
- https://www.oracle.com/security-alerts/cpujul2022.html