René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Cx08fcacc9-cb99 @ Maven-org.json:json-20131018","articleBody":"**Vulnerable Package** issue exists @ **Maven\\-org\\.json:json\\-20131018** in branch **master**\r\n\r\nThe package `JSON-java` before 20180130 is vulnerable to Denial of service. The method `JSONArray()` in class `JSONArray()` of file `JSONArray.java`, doesn't check for unclosed array while parsing, causing the application to crash, due to an StackOverflowException. This affects the Availability of the application.\r\n\r\n**Namespace:** mridilla\r\n**Repository:** JavaVulnerableLab\r\n**Repository Url:** https://github.com/mridilla/JavaVulnerableLab\r\n**CxAST\\-Project:** mridilla/JavaVulnerableLab\r\n**CxAST platform scan:** [e1fc43b6\\-0e4d\\-4a93\\-8009\\-8fe24d4a9091](https://ast.checkmarx.net/projects/188bd83b-3bc2-4f79-9ccc-90f764c20505/scans?id=e1fc43b6-0e4d-4a93-8009-8fe24d4a9091\u0026branch=master)\r\n**Branch:** master\r\n**Application:** JavaVulnerableLab\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** CWE-248\r\n\r\n\r\n----\r\n**Addition Info**\r\n**Attack vector:** NETWORK\r\n**Attack complexity:** LOW\r\n**Confidentiality impact:** NONE\r\n**Availability impact:** HIGH\r\n\r\n\r\n----\r\n**References**\r\n[Issue](https://github.com/stleary/JSON-java/issues/372)\r\n[Pull request](https://github.com/stleary/JSON-java/pull/373)\r\n[Commit](https://github.com/stleary/JSON-java/commit/d2a66a42878e3da79f462caf2c1b364945e1a427)\r\n","author":{"url":"https://github.com/mridilla","@type":"Person","name":"mridilla"},"datePublished":"2022-07-01T14:26:26.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/102/JavaVulnerableLab/issues/102"}