GHSA-jr6h-r7vg-f9mc

org.ini4j allows attackers to cause a Denial of Service (DoS)

At a glance

Published: 2022-10-12 12:00 UTC
Updated: 2025-06-09 18:35 UTC
CVE: CVE-2022-41404
CVSS_V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Description

An issue in the fetch() method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

Affected packages

Package	Versions
Maven · org.ini4j:ini4j	introduced 0, last affected 0.5.4

References

https://nvd.nist.gov/vuln/detail/CVE-2022-41404 ADVISORY
https://github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2022/CVE-2022-41404 WEB
https://lists.debian.org/debian-lts-announce/2022/11/msg00037.html WEB
https://sourceforge.net/p/ini4j/bugs/56 WEB
https://sourceforge.net/projects/ini4j WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database