CVE-2023-4043

Summary

CVE-2023-4043 is a vulnerability affecting Eclipse Parsson versions 1.1.4 and 1.0.5. Malicious JSON inputs from untrusted sources can exploit edge cases in Java's built-in number parsing, leading to unexpectedly large processing times. This issue can cause performance degradation and potential denial of service attacks. To mitigate the risk, Eclipse Parsson implemented size limits for numbers and their scales.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.