CVE-2021-23900
Uncaught Exception leading to Denial of Service in json-sanitizer
7.5
HIGH
CVSS 3.1
EPSS 0.41%
Description
OWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.
How to fix CVE-2021-23900
To remediate CVE-2021-23900, upgrade the affected package to a fixed version below.
- Maven/com.mikesamuel:json-sanitizer—upgrade to 1.2.2 or later
Is CVE-2021-23900 being exploited?
Low — EPSS is 0.4%, meaning exploitation activity has not been observed at scale.
Affected packages (1)
- from 0, < 1.2.2
CVSS scores
| Source | Version | Severity | Vector |
|---|---|---|---|
| osv | CVSS 3.1 | HIGH7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |