← Back to browse · API

CVE-2024-21907

Severity
HIGH
CVSS
7.5
EPSS
0.32908
Risk score
41.52
CISA KEV
No
PoC
No
Published
2024-01-03
Modified
2026-07-14
First seen
2026-08-07
Aliases
EUVD-2022-5935, GHSA-5CRP-9R3C-P9VR
Products
-
Sources
euvd EUVD-2022-5935

Description

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.

References