PT-2024-32854
CVE-2024-47855
·
Published
2024-10-03
·
Updated
2025-10-28
Description by
CVSS 4.0
6.9
MediumMetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions
JSON-lib versions prior to 3.1.0
Description
The issue is related to the handling of an unbalanced comment string in the util/JSONTokener.java file. This flaw can be exploited due to the mishandling of such strings.
Recommendations
For versions prior to 3.1.0, update to version 3.1.0 or later to resolve the issue. As a temporary workaround, consider restricting the use of the
util/JSONTokener.java file until a patch is available. Found an issue in the description? Have something to add? Feel free to write us 👾