CVSS 3.1 Score 7.5 of 10 (high)


Published Feb 26, 2024


CVE-2024-27454 is a cyber vulnerability that affects orjson before version 3.9.15. The vulnerability allows for unlimited recursion in deeply nested JSON documents when using the orjson.loads function. This vulnerability has a high severity rating and a base score of 7.5 according to CVSS:3.1. It can be exploited remotely with no privileges required and no user interaction, making it a significant threat to organizations. To remediate this vulnerability, organizations should update their orjson version to 3.9.15 or later to ensure that recursion is limited in nested JSON documents and prevent potential exploitation and associated risks to data integrity and availability.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-27454 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options