diff --git a/advisories/github-reviewed/2022/12/GHSA-3vqj-43w4-2q58/GHSA-3vqj-43w4-2q58.json b/advisories/github-reviewed/2022/12/GHSA-3vqj-43w4-2q58/GHSA-3vqj-43w4-2q58.json index 9a7d31d8226..4db12e71918 100644 --- a/advisories/github-reviewed/2022/12/GHSA-3vqj-43w4-2q58/GHSA-3vqj-43w4-2q58.json +++ b/advisories/github-reviewed/2022/12/GHSA-3vqj-43w4-2q58/GHSA-3vqj-43w4-2q58.json @@ -1,13 +1,13 @@ { "schema_version": "1.4.0", "id": "GHSA-3vqj-43w4-2q58", - "modified": "2023-02-24T21:50:05Z", + "modified": "2023-04-14T17:02:26Z", "published": "2022-12-13T15:30:26Z", "aliases": [ "CVE-2022-45688" ], - "summary": "hutool-json stack overflow vulnerability", - "details": "A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.", + "summary": "json stack overflow vulnerability", + "details": "A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 and org.json:json before version 20230227 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.", "severity": [ { "type": "CVSS_V3", @@ -33,6 +33,25 @@ ] } ] + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.json:json" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "fixed": "20230227" + } + ] + } + ] } ], "references": [ @@ -47,6 +66,10 @@ { "type": "WEB", "url": "https://github.com/stleary/JSON-java/issues/708" + }, + { + "type": "WEB", + "url": "https://github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102" } ], "database_specific": {