| 제목 | https://github.com/joelittlejohn/ https://github.com/joelittlejohn/jsonschema2pojo/ 1.2.2 Denial of Service |
|---|
| 설명 | find a stackoverflow in https://github.com/joelittlejohn/jsonschema2pojo/ which may lead to a Denial of Service (DoS) via crafted JSON.
when use mvn jsonschema2pojo:generate process a json like
{
"$ref": "#",
"definitions": {
"User": { "type": "string" }
}
}
It will report an StackOverflowError , like
---------------------------------------------------
Exception in thread "main" java.lang.StackOverflowError
at java.net.URI.appendSchemeSpecificPart(URI.java:1909)
at java.net.URI.toString(URI.java:1941)
at java.net.URI.<init>(URI.java:817)
at org.jsonschema2pojo.SchemaStore.create(SchemaStore.java:114)
at org.jsonschema2pojo.rules.SchemaRule.apply(SchemaRule.java:69)
at org.jsonschema2pojo.rules.SchemaRule.apply(SchemaRule.java:76)
at org.jsonschema2pojo.rules.SchemaRule.apply(SchemaRule.java:76)
BUG_Author：K1ling and fdt |
|---|
| 원천 | ⚠️ https://github.com/joelittlejohn/jsonschema2pojo/issues/1672 |
|---|
| 사용자 | kar3nk (UID 83682) |
|---|
| 제출 | 2025. 04. 03. AM 09:35 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 04. 14. PM 02:38 (11 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 304643 [joelittlejohn jsonschema2pojo 1.2.2 JSON File SchemaRule.java apply 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|