René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Cx08fcacc9-cb99 @ Maven-org.json:json-20090211","articleBody":"**Vulnerable Package** issue exists @ **Maven\\-org\\.json:json\\-20090211** in branch **master**\r\n\r\nThe package `JSON-java` before 20180130 is vulnerable to Denial of service. The method `JSONArray()` in class `JSONArray()` of file `JSONArray.java`, doesn't check for unclosed array while parsing, causing the application to crash, due to an StackOverflowException. This affects the Availability of the application.\r\n\r\n**Namespace:** srcdevel1\r\n**Repository:** JavaVulnerableLabv1\r\n**Repository Url:** https://github.com/srcdevel1/JavaVulnerableLabv1\r\n**CxAST\\-Project:** srcdevel1/JavaVulnerableLabv1\r\n**CxAST platform scan:** [19f0f9e7\\-df09\\-4044\\-8007\\-1bf4035f4eb9](https://eu.ast.checkmarx.net/projects/c2e4b889-9c6c-4948-82d2-f124f03b4c82/scans?id=19f0f9e7-df09-4044-8007-1bf4035f4eb9\u0026branch=master)\r\n**Branch:** master\r\n**Application:** JavaVulnerableLabv1\r\n**Severity:** HIGH\r\n**State:** NOT_IGNORED\r\n**Status:** RECURRENT\r\n**CWE:** CWE-248\r\n\r\n\r\n----\r\n**Addition Info**\r\n**Attack vector:** NETWORK\r\n**Attack complexity:** LOW\r\n**Confidentiality impact:** NONE\r\n**Availability impact:** HIGH\r\n\r\n\r\n----\r\n**References**\r\n[Issue](https://github.com/stleary/JSON-java/issues/372)\r\n[Pull request](https://github.com/stleary/JSON-java/pull/373)\r\n[Commit](https://github.com/stleary/JSON-java/commit/d2a66a42878e3da79f462caf2c1b364945e1a427)\r\n","author":{"url":"https://github.com/srcdev888","@type":"Person","name":"srcdev888"},"datePublished":"2022-03-28T00:40:14.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":0},"url":"https://github.com/64/JavaVulnerableLabv1/issues/64"}