René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Cx08fcacc9-cb99 @ Maven-org.json:json-20090211","articleBody":"**Vulnerable Package** issue exists @ **Maven\\-org\\.json:json\\-20090211** in branch **master**\r\n\r\nThe package `JSON-java` before 20180130 is vulnerable to Denial of service. The method `JSONArray()` in class `JSONArray()` of file `JSONArray.java`, doesn't check for unclosed array while parsing, causing the application to crash, due to an StackOverflowException. This affects the Availability of the application.\r\n\r\n**Namespace:** TaynaCT\r\n**Repository:** JavaVulnerableLab\r\n**Repository Url:** https://github.com/TaynaCT/JavaVulnerableLab\r\n**CxAST\\-Project:** TaynaCT/JavaVulnerableLab\r\n**CxAST platform scan:** [8306ce52\\-f0ea\\-4229\\-8014\\-fe5126ba5a64](https://eu.ast.checkmarx.net/projects/26ce21e6-14ed-4718-96d4-658078577e49/scans?id=8306ce52-f0ea-4229-8014-fe5126ba5a64\u0026branch=master)\r\n**Branch:** master\r\n**Application:** JavaVulnerableLab\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** CWE-248\r\n\r\n\r\n----\r\n**Addition Info**\r\n**Attack vector:** NETWORK\r\n**Attack complexity:** LOW\r\n**Confidentiality impact:** NONE\r\n**Availability impact:** HIGH\r\n\r\n\r\n----\r\n**References**\r\n[Issue](https://github.com/stleary/JSON-java/issues/372)\r\n[Pull request](https://github.com/stleary/JSON-java/pull/373)\r\n[Commit](https://github.com/stleary/JSON-java/commit/d2a66a42878e3da79f462caf2c1b364945e1a427)\r\n","author":{"url":"https://github.com/TaynaCT","@type":"Person","name":"TaynaCT"},"datePublished":"2022-04-13T11:43:57.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/8/JavaVulnerableLab/issues/8"}