Vulnerability Details CVE-2022-41404
An issue in the fetch() method in the BasicProfile class of org.ini4j through version v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.007
EPSS Ranking 72.6%
CVSS Severity
CVSS v3 Score 7.5
References
- https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2022/CVE-2022-41404
- https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html
- https://sourceforge.net/p/ini4j/bugs/56/
- https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html
- https://sourceforge.net/p/ini4j/bugs/56/
Products affected by CVE-2022-41404
-
cpe:2.3:a:ini4j_project:ini4j:*
-
cpe:2.3:o:debian:debian_linux:10.0