Security Advisory

CVE-2024-21907

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-03 15:23:04
Last updated 2025-11-28 22:23:05
Assigner VulnCheck
State PUBLISHED

Description

Newtonsoft.Json before version 13.0.1 is affected by a mishandling of exceptional conditions vulnerability. Crafted data that is passed to the JsonConvert.DeserializeObject method may trigger a StackOverflow exception resulting in denial of service. Depending on the usage of the library, an unauthenticated and remote attacker may be able to cause the denial of service condition.