** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Apache |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2022-7064 | ** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid. |
 Github GHSA |
GHSA-99jc-v8qm-wjvv | JXPath Out-of-bounds Write vulnerability |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
| Link | Providers |
|---|---|
| https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=47057 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: apache
Published:
Updated: 2024-08-03T12:14:39.803Z
Reserved: 2022-09-07T00:00:00
Link: CVE-2022-40159
Vulnrichment
No data.
NVD
Status : Modified
Published: 2022-10-06T18:16:49.693
Modified: 2024-11-21T07:20:59.520
Link: CVE-2022-40159
Redhat
No data.
OpenCVE Enrichment
No data.