Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data, as demonstrated by truncated data.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Prosody util/json.lua json.decode函数拒绝服务漏洞
Vulnerability Description
Prosody 0.8.1之前的0.8.x版本的util/json.lua中的json.decode函数中存在拒绝服务漏洞。远程攻击者可借助无效的JSON数据导致拒绝服务(无限循环)。
CVSS Information
N/A
Vulnerability Type
N/A