OWASP json-sanitizer up to 1.2.1 JSON denial of service

entryeditHistoryDiffjsonxmlCTI

A vulnerability, which was classified as problematic, was found in OWASP json-sanitizer up to 1.2.1. Affected is an unknown code block of the component JSON Handler. Upgrading to version 1.2.2 eliminates this vulnerability. The upgrade is hosted for download at github.com. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

Field

Commit Conf

Approve Conf

ID	Commited	User	Field	Change	Remarks	Moderated	Reason	C
10826849	01/14/2021	VulD...	price_0day	$0-$5k	see documentation	01/14/2021	accepted	90
10826848	01/14/2021	VulD...	cvss3_meta_tempscore	3.5	see documentation	01/14/2021	accepted	90
10826847	01/14/2021	VulD...	cvss3_meta_basescore	3.5	see documentation	01/14/2021	accepted	90
10826846	01/14/2021	VulD...	cvss3_vuldb_tempscore	3.5		01/14/2021	accepted	90
10826845	01/14/2021	VulD...	cvss3_vuldb_basescore	3.5		01/14/2021	accepted	90
10826844	01/14/2021	VulD...	cvss2_vuldb_tempscore	2.3		01/14/2021	accepted	90
10826843	01/14/2021	VulD...	cvss2_vuldb_basescore	2.3		01/14/2021	accepted	90
10826842	01/14/2021	VulD...	cvss3_vuldb_e	X	derived from historical data	01/14/2021	accepted	80
10826841	01/14/2021	VulD...	cvss3_vuldb_s	U	derived from historical data	01/14/2021	accepted	80
10826840	01/14/2021	VulD...	cvss3_vuldb_ui	N	derived from historical data	01/14/2021	accepted	80
10826839	01/14/2021	VulD...	cvss3_vuldb_pr	L	derived from historical data	01/14/2021	accepted	80
10826838	01/14/2021	VulD...	cvss3_vuldb_ac	L	derived from historical data	01/14/2021	accepted	80
10826837	01/14/2021	VulD...	cvss3_vuldb_av	A	derived from historical data	01/14/2021	accepted	80
10826836	01/14/2021	VulD...	cvss2_vuldb_e	ND	derived from historical data	01/14/2021	accepted	80
10826835	01/14/2021	VulD...	cvss2_vuldb_au	S	derived from historical data	01/14/2021	accepted	80
10826834	01/14/2021	VulD...	cvss2_vuldb_ac	M	derived from historical data	01/14/2021	accepted	80
10826833	01/14/2021	VulD...	cvss2_vuldb_av	A	derived from historical data	01/14/2021	accepted	80
10826832	01/14/2021	VulD...	cvss2_vuldb_rl	OF	derived from vuldb v3 vector	01/14/2021	accepted	80
10826831	01/14/2021	VulD...	cvss2_vuldb_rc	C	derived from vuldb v3 vector	01/14/2021	accepted	80
10826830	01/14/2021	VulD...	cvss2_vuldb_ai	P	derived from vuldb v3 vector	01/14/2021	accepted	80