CVE-2023-3894
MediumCVSS 5.8Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
Users of jackson-dataformats-text for parsing TOML data may be vulnerable to Denial of Service (DOS) attacks. If the parser is running on user-supplied input, an attacker may provide content that causes the parser to crash due to stack overflow.
Risk Assessment
The organization may experience service downtime, leading to loss of application availability and user trust.
Recommendation
It is recommended to avoid processing user-supplied TOML data or to implement additional safeguards to minimize the risk of stack overflow.
Original NVD description (English source)
Those using jackson-dataformats-text to parse TOML data may be vulnerable to Denial of Service attacks (DOS). If the parser is running on user supplied input, an attacker may supply content that causes the parser to crash by stackoverflow. This effect may support a denial of service attack.