Eclipse Parsson vulnerabilities

2 CVEs affecting Eclipse Parsson, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-7272, published 2024-07-17.

More from Eclipse.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-4043, published 2023-11-03. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. In Eclipse Parsson before versions 1.1.4 and 1.0.5, Parsing JSON from untrusted sources can lead malicious actors to exploit the fact that the built-in support for parsing numbers with large scale in…
• CVE-2023-7272, published 2024-07-17. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overflow exception and denial of service. Eclipse Parsson allows…