-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| net.minidev:json-smart | maven | < 2.4.9 | 2.4.9 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from uncontrolled recursion in JSON parsing functions. Key evidence includes: 1) The fix commit e2791ae shows depth counter management being added in JSONParserBase.java 2) The test case added in TestOverflow.java validates proper handling of deep structures 3) The CWE-674 classification explicitly points to recursion control issues. The readObject and readArray functions are core recursive parsing entry points that lacked depth limitation mechanisms in vulnerable versions, as evidenced by the patch adding depth-- operation in readObject and implied stack management requirements.
JavaJava