Headline
GHSA-mqxp-cjr9-c5jm: JXPath Out-of-bounds Write vulnerability
Those using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.
JXPath Out-of-bounds Write vulnerability
Moderate severity GitHub Reviewed Published Oct 6, 2022 • Updated Oct 10, 2022
Related news
CVE-2022-40160
Those using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.