CVE-2023-3894

Summary

CVE-2023-3894 is a Denial of Service (DoS) vulnerability affecting the use of jackson-dataformats-text to parse TOML data. If an attacker supplies user input containing malicious content, the parser may experience a stack overflow, leading to a crash. This crash can form the basis of a DoS attack. Users of jackson-dataformats-text are advised to implement protective measures against user-supplied input or upgrade to a patched version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.