CVE-2023-34617
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Jun 14, 2023
Updated: Jan 3, 2025
CWE ID 787
Summary
CVE-2023-34617 is a denial-of-service vulnerability affecting genson, a Java-based JSON serialization library, up to version 1.6. Attackers can exploit this issue by providing crafted objects with cyclic dependencies, leading to unspecified impacts on the targeted system. This vulnerability could potentially cause the application to crash or consume excessive resources, resulting in a denial-of-service condition. Upgrading to a patched version or implementing alternative libraries to mitigate this risk is strongly advised.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.