Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-hw4q-585g-f92x: JXPath Out-of-bounds Write vulnerability

Those using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.

ghsa
#vulnerability#dos#git#xpath

JXPath Out-of-bounds Write vulnerability

Moderate severity GitHub Reviewed Published Oct 6, 2022 • Updated Oct 10, 2022

Related news

CVE-2022-40161

Those using JXPath to interpret XPath may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.