What’s Vulnerable › Vulnerabilities

CVE-2024-47855

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 17.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-10-04 · updated 2026-06-17

Description

util/JSONTokener.java in JSON-lib before 3.1.0 mishandles an unbalanced comment string.

References

• https://github.com/kordamp/json-lib/commit/a0c4a0eae277130e22979cf307c95dec4005a78e
• https://github.com/kordamp/json-lib/compare/v3.0.3...v3.1.0

Get alerted when CVE-2024-47855 or the next vulnerability affects your stack