Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC ×44

CVE-2024-21907

CVSS 3.1
7.5 high
EPSS
33%p98
Published
·
Modified
Analyze CVE-2024-21907 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.

Vendors
newtonsoft
Products
json.net
Weakness
CWE-755
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (32.9%)

In the news

3 stories