High severity7.5NVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026
CVE-2022-45688
CVE-2022-45688
Description
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
cn.hutool:hutool-jsonMaven | < 5.8.25 | 5.8.25 |
org.json:jsonMaven | < 20230227 | 20230227 |
Affected products
7- hutool/hutool-jsondescription
- osv-coords4 versionspkg:rpm/opensuse/json-java&distro=openSUSE%20Tumbleweedpkg:maven/cn.hutool/hutool-jsonpkg:maven/org.json/jsonpkg:apk/chainguard/hadoop-fips-3.3.6
< 20240303-1.1+ 3 more
- (no CPE)range: < 20240303-1.1
- (no CPE)range: < 5.8.25
- (no CPE)range: < 20230227
- (no CPE)range: < 3.3.6-r15
Patches
Vulnerability mechanics
References
7- github.com/dromara/hutool/issues/2748nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/stleary/JSON-java/issues/708nvdExploitIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-3vqj-43w4-2q58ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-45688ghsaADVISORY
- github.com/dromara/hutool/commit/6a2b585de0a380e8c12016dbaa1620b69be11b8cghsaWEB
- github.com/dromara/hutool/releases/tag/5.8.25ghsaWEB
- github.com/stleary/JSON-java/commit/a6e412bded7a0ad605adfeca029318f184c32102ghsaWEB
News mentions
0No linked articles in our index yet.