OSV-2023-543

    Dashboard / Vulnerabilities / OSV-2023-543

    OSV-2023-543

    Published: 5 Jul 2023Last Modified: 6 Jul 2023

    Summary: Security exception in com.github.javaparser.ast.validator.TreeVisitorValidator.accept

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60355 ``` Crash type: Security exception Crash state: com.github.javaparser.ast.validator.TreeVisitorValidator.accept com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel com.github.javaparser.ast.expr.FieldAccessExpr.getMetaModel ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=60355

    Affected packages

    Package

    Name: javaparser

    Purl: pkg:generic/javaparser

    Affected ranges

    Type: GIT

    Events:

    Introduced- 8b358698318380d9b9b15c510a8e8cbe89a4c648
    Fixed -dfea1a6aa2de2efa11f07943b5f635317570cf45

    Affected versions

    javaparser-parent-3.25.4

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-543 | CVE-DB