System.Text.Json DoS & Potential RCE via StackOverflowException

Vulnerability Summary Vulnerability Overview Vulnerability Name: Three template-only paths leading to uncatchable StackOverflowException; default path (posix.json) bypasses ExpressionDepthLimit; array comparison and object.value recursion remain unpatched Vulnerability Type: Denial of Service (DoS), Potential Remote Code Execution (RCE) CVSS Score: 7.5 (High) Affected Components: - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in - in -

Goal Reached Thanks to every supporter — we hit 100%!

System.Text.Json DoS & Potential RCE via StackOverflowException

More from this source