Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
I. Basic Information for CVE-2024-21907
Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Improper Handling of Exceptional Conditions in Newtonsoft.Json
Source: NVD (National Vulnerability Database)
Vulnerability Description
Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
对异常条件的处理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Json.NET 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Json.NET是James Newton-King个人开发者的一个流行的 .NET 高性能 JSON 框架。 Json.NET 13.0.1之前版本存在安全漏洞,该漏洞源于异常条件处理不当,传递到 JsonConvert.DeserializeObject 方法的数据可能会触发堆栈溢出,从而导致拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
II. Public POCs for CVE-2024-21907
#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2024-21907
Please Login to view more intelligence information
IV. Related Vulnerabilities
V. Comments for CVE-2024-21907

No comments yet


Leave a comment