CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HCVE-2023-7272
High (7.5) in eclipse parsson. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in org.eclipse.parsson:parsson 1.0.4, 1.1.3.
In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows processing (e.g. parse, generate, transform and query) JSON documents.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
- CWE
- CWE-787
- Published
- Modified
- Record from
- the NVD, synced
Affected
- eclipse:parsson
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-2rwm-xv5j-777p | Maven | org.eclipse.parsson:parsson | >=1.1.0 <1.1.3 | 1.1.3 |
| GHSA-2rwm-xv5j-777p | Maven | org.eclipse.parsson:parsson | <1.0.4 | 1.0.4 |