An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade jettison-javadocUpgrade jettison | Jun 6, 2023 | Mar 22, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | May 15, 2025 | Mar 19, 2024 |
| Debian | — | No solution existsUpgrade libjettison-java | May 15, 2025 | Mar 22, 2023 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 35557681 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 35560771 for version 14.1.1.0.0. | Jul 19, 2023 | Mar 22, 2023 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 22, 2023 |
| Suse | — | Upgrade jettisonUpgrade jettison-javadoc | Apr 24, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade libjettison-java (Ubuntu Pro)Upgrade libjettison-java | Jun 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub