OSV-2023-920

    Dashboard / Vulnerabilities / OSV-2023-920

    OSV-2023-920

    Published: 28 Sept 2023Last Modified: 28 Sept 2023

    Summary: Security exception in com.github.javaparser.GeneratedJavaParser.Expression

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62731 ``` Crash type: Security exception Crash state: com.github.javaparser.GeneratedJavaParser.Expression java.base/sun.nio.cs.CESU_8$Encoder.to3Bytes java.base/sun.nio.cs.CESU_8$Encoder.encodeArrayLoop ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=62731

    Affected packages

    Package

    Name: javaparser

    Purl: pkg:generic/javaparser

    Affected ranges

    Type: GIT

    Events:

    Introduced- 25139c9f1010f3063789b75c04471de90bd5cf8a
    Fixed -6fa0a76ac8727fd1ee8ba90d138a932c81a21ab5

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2023-920 | CVE-DB