7.5
CVE-2021-23900
- EPSS 0.41%
- Veröffentlicht 13.01.2021 16:15:14
- Zuletzt bearbeitet 21.11.2024 05:52:01
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOWASP json-sanitizer before 1.2.2 can output invalid JSON or throw an undeclared exception for crafted input. This may lead to denial of service if the application is not prepared to handle these situations.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Owasp ≫ Json-sanitizer Version < 1.2.2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.582 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|