-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.eclipse.parsson:project | maven | >= 1.1.0, < 1.1.4 | 1.1.4 |
| org.eclipse.parsson:project | maven | < 1.0.5 | 1.0.5 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper input validation of JSON number scales. The patches modify JsonNumberImpl's methods to check absolute scale values, proving these functions were the execution points for number processing. Both methods directly convert BigDecimal to BigInteger and lacked proper scale validation pre-patch, making them the primary vectors for DoS via large-scale numbers. The test cases explicitly target these methods with values exceeding scale limits, confirming their role in exploitation.