CyberRota Analysis
AI-GeneratedThe vulnerability affects the json-patch component in Java, specifically in the JsonPatch.apply function, which can lead to excessive resource consumption. This issue can be exploited remotely, potentially impacting the performance and availability of applications utilizing this library. Organizations using versions up to 1.13 of json-patch should prioritize remediation to mitigate the risk of denial-of-service attacks.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A vulnerability has been found in java-json-tools json-patch up to 1.13. Affected by this vulnerability is the function JsonPatch.apply of the file src/main/java/com/github/fge/jsonpatch/JsonPatch.java of the component Patch Operation Handler. The manipulation leads to resource consumption. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through an issue report but has not responded yet.