An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a self-reference in one of its elements. This leads to a StackOverflowError exception being thrown.
CVSS Details
- CVSS 3.1 Base Score: 5.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade jettisonUpgrade jettison-javadoc | Jun 6, 2023 | Mar 22, 2023 |
| Atlassian Jira | — | Upgrade to the latest version of Atlassian JIRA | May 15, 2025 | Mar 19, 2024 |
| Debian | — | Upgrade libjettison-javaNo solution exists | May 15, 2025 | Mar 22, 2023 |
| Oracle Weblogic | — | Apply the Patch Set Update (PSU) 35557681 for version 12.2.1.4.0.Apply the Patch Set Update (PSU) 35560771 for version 14.1.1.0.0. | Jul 19, 2023 | Mar 22, 2023 |
| Red Hat Jboss Eap | — | Upgrade Red Hat JBoss EAP to the latest version | Sep 19, 2024 | Mar 22, 2023 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 22, 2023 |
| Suse | — | Upgrade jettison-javadocUpgrade jettison | Apr 24, 2023 | Mar 22, 2023 |
| Ubuntu | — | Upgrade libjettison-javaUpgrade libjettison-java (Ubuntu Pro) | Jun 21, 2023 | Mar 22, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub