(Jun 12) json-c could be made to crash or consume CPU if it processed a speciallycrafted JSON document.
Comment
Posts Tagged JSON
2 results.
Debian: 2613-1: rails: insufficient input validati
Jan31
on January 31, 2013
at 11:41 pm
Posted In: Uncategorized
(Jan 30) Lawrence Pit discovered that Ruby on Rails, a web development framenwork, is vulnerable to a flaw in the parsing of JSON to YAML. Using a specially crafted payload attackers can trick the backend into decoding a subset of YAML. [More…]