oblac/jodd

Releases61

Frequency1 month 2 weeks

Last Release over 5 years ago

Stars4.06K

Jodd! Lightweight. Java. Zero dependencies. Use what you like.

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-29631 ↗	Jun 6, 2022Monday, 6 June 2022, 21:15	7.5 HIGH	5 MEDIUM
Jodd HTTP v6.0.9 was discovered to contain multiple CLRF injection vulnerabilities via the components jodd.http.HttpRequest#set and `jodd.http.HttpRequest#send. These vulnerabilities allow attackers to execute Server-Side Request Forgery (SSRF) via a crafted TCP payload.
CVE-2018-21234 ↗	May 21, 2020Thursday, 21 May 2020, 23:15	9.8 CRITICAL	7.5 HIGH
Jodd before 5.0.4 performs Deserialization of Untrusted JSON Data when setClassMetadataName is set.