CVE-2021-31684 @ Maven-net.minidev:json-smart-2.3

[AASMACMX]

Vulnerable Package issue exists @ Maven-net.minidev:json-smart-2.3 in branch main

A vulnerability was discovered in the indexOf function of JSONParserByteArray in JSON Smart versions prior to 1.3.3 and 2.x versions prior to 2.4.4 which causes a denial of service (DOS) via a crafted web request.

Namespace: CxDemoInABoxRepos
Repository: Java-Webgoat
Repository Url: https://github.com/CxDemoInABoxRepos/Java-Webgoat
CxAST-Project: CxDemoInABoxRepos/Java-Webgoat
CxAST platform scan: 466e73ae-3cc9-415a-8383-b7e20e1af3be
Branch: main
Application: Java-Webgoat
Severity: HIGH
State: TO_VERIFY
Status: RECURRENT
CWE: CWE-787

---

Additional Info
Attack vector: NETWORK
Attack complexity: LOW
Confidentiality impact: NONE
Availability impact: HIGH
Remediation Upgrade Recommendation: 2.4.4

---

References
Advisory
Issue
Pull request
Issue
Pull request
Commit
Commit