CVE-2023-34610

Summary

CVE-2023-34610 is a newly disclosed vulnerability affecting json-io up to version 4.14.0. This issue permits attackers to trigger a denial-of-service or potentially other unspecified impacts by leveraging crafted objects with cyclic dependencies. The precise nature of these other impacts is yet to be determined. Json-io is a popular library used for parsing and generating JSON data; hence, this vulnerability could pose a significant threat if exploited in applications relying on this library. Users are encouraged to upgrade to the latest version of json-io to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.