jline/jline3 · Security
JLine vulnerable to out of memory error
- GHSA ID
- GHSA-2268-98wh-qfhf
- CVE ID
- CVE-2023-50572
- Severity
- medium
- Published
- Updated
- CVSS
- 5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- CVSS v3
- 5.5 · CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
Description
An issue in the component GroovyEngine.execute of JLine v3.24.1 allows attackers to cause an out of memory (OOM) error exception.
CWEs
- CWE-122 · Heap-based Buffer Overflow
- CWE-787 · Out-of-bounds Write