PatchTheCVEjettison vulnerabilities and fixes
Recent CVEs affecting jettison, with upgrade or downgrade steps. 5 tracked.
jettison has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2023-03-22. Highest priority: CVE-2022-45693 (score 60/100).
- CVE-2023-1436 MEDIUM 5.9 UPGRADE An infinite recursion is triggered in Jettison when constructing a JSONArray from a Collection that contains a
- CVE-2022-45693 HIGH 7.5 UPGRADE MITIGATE Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter
- CVE-2022-45685 HIGH 7.5 UPGRADE MITIGATE A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSO
- CVE-2022-40150 MEDIUM 6.5 UPGRADE MITIGATE Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)
- CVE-2022-40149 MEDIUM 6.5 UPGRADE MITIGATE Those using Jettison to parse untrusted XML or JSON data may be vulnerable to Denial of Service attacks (DOS)
FAQ
How do I fix jettison vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jettison being exploited right now?
None of the tracked jettison CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jettison CVE should I patch first?
CVE-2022-45693 currently ranks highest (60/100): Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter.