CVE-2024-21907

Summary

CVE-2024-21907 is a newly identified vulnerability affecting Newtonsoft.Json before version 13.0.1. This issue arises due to the library's mishandling of exceptional conditions. Maliciously crafted data input to the JsonConvert.DeserializeObject method can lead to a StackOverflow exception, potentially causing a denial of service. An unauthenticated and remote attacker may exploit this vulnerability if the library is misconfigured or improperly used.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.