CVE-2023-25362 - Vulnerability Details

Vendors	Products
Redhat	Enterprise Linux
Webkitgtk	Webkitgtk

Package	CPE	Advisory	Released Date
Red Hat Enterprise Linux 8
webkit2gtk3-0:2.38.5-1.el8	cpe:/a:redhat:enterprise_linux:8	RHSA-2023:2834	2023-05-16T00:00:00Z
Red Hat Enterprise Linux 9
webkit2gtk3-0:2.38.5-1.el9	cpe:/a:redhat:enterprise_linux:9	RHSA-2023:2256	2023-05-09T00:00:00Z

Link	Providers
http://www.openwall.com/lists/oss-security/2023/04/21/3
https://bugs.webkit.org/show_bug.cgi?id=244802
https://nvd.nist.gov/vuln/detail/CVE-2023-25362
https://security.gentoo.org/glsa/202305-32
https://www.cve.org/CVERecord?id=CVE-2023-25362

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-25362", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "dateUpdated": "2025-03-07T17:26:32.653Z", "dateReserved": "2023-02-06T00:00:00.000Z", "datePublished": "2023-03-02T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-05-30T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely."}], "affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"version": "n/a", "status": "affected"}]}], "references": [{"url": "https://bugs.webkit.org/show_bug.cgi?id=244802"}, {"name": "[oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003", "tags": ["mailing-list"], "url": "http://www.openwall.com/lists/oss-security/2023/04/21/3"}, {"name": "GLSA-202305-32", "tags": ["vendor-advisory"], "url": "https://security.gentoo.org/glsa/202305-32"}], "problemTypes": [{"descriptions": [{"type": "text", "lang": "en", "description": "n/a"}]}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:18:36.290Z"}, "title": "CVE Program Container", "references": [{"url": "https://bugs.webkit.org/show_bug.cgi?id=244802", "tags": ["x_transferred"]}, {"name": "[oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003", "tags": ["mailing-list", "x_transferred"], "url": "http://www.openwall.com/lists/oss-security/2023/04/21/3"}, {"name": "GLSA-202305-32", "tags": ["vendor-advisory", "x_transferred"], "url": "https://security.gentoo.org/glsa/202305-32"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-07T17:25:41.957634Z", "id": "CVE-2023-25362", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-07T17:26:32.653Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-25362 (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

assignerShortName : mitre (string)

dateUpdated : 2025-03-07T17:26:32.653Z (string)

dateReserved : 2023-02-06T00:00:00.000Z (string)

datePublished : 2023-03-02T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-05-30T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely. (string)

}

]

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

version : n/a (string)

status : affected (string)

}

]

}

]

references : [ »

0 : { »

url : https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

}

1 : { »

name : [oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003 (string)

tags : [ »

0 : mailing-list (string)

]

url : http://www.openwall.com/lists/oss-security/2023/04/21/3 (string)

}

2 : { »

name : GLSA-202305-32 (string)

tags : [ »

0 : vendor-advisory (string)

]

url : https://security.gentoo.org/glsa/202305-32 (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : text (string)

lang : en (string)

description : n/a (string)

}

]

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T11:18:36.290Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

name : [oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003 (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

url : http://www.openwall.com/lists/oss-security/2023/04/21/3 (string)

}

2 : { »

name : GLSA-202305-32 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

url : https://security.gentoo.org/glsa/202305-32 (string)

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-07T17:25:41.957634Z (string)

id : CVE-2023-25362 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-07T17:26:32.653Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://bugs.webkit.org/show_bug.cgi?id=244802", "tags": ["x_transferred"]}, {"url": "http://www.openwall.com/lists/oss-security/2023/04/21/3", "name": "[oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003", "tags": ["mailing-list", "x_transferred"]}, {"url": "https://security.gentoo.org/glsa/202305-32", "name": "GLSA-202305-32", "tags": ["vendor-advisory", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T11:18:36.290Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-25362", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-07T17:25:41.957634Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-07T17:26:27.996Z"}}], "cna": {"affected": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "references": [{"url": "https://bugs.webkit.org/show_bug.cgi?id=244802"}, {"url": "http://www.openwall.com/lists/oss-security/2023/04/21/3", "name": "[oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003", "tags": ["mailing-list"]}, {"url": "https://security.gentoo.org/glsa/202305-32", "name": "GLSA-202305-32", "tags": ["vendor-advisory"]}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "text", "description": "n/a"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2023-05-30T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2023-25362", "state": "PUBLISHED", "dateUpdated": "2025-03-07T17:26:32.653Z", "dateReserved": "2023-02-06T00:00:00.000Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2023-03-02T00:00:00.000Z", "assignerShortName": "mitre"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2023/04/21/3 (string)

name : [oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003 (string)

tags : [ »

0 : mailing-list (string)

1 : x_transferred (string)

]

}

2 : { »

url : https://security.gentoo.org/glsa/202305-32 (string)

name : GLSA-202305-32 (string)

tags : [ »

0 : vendor-advisory (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T11:18:36.290Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-25362 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-07T17:25:41.957634Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-07T17:26:27.996Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : n/a (string)

product : n/a (string)

versions : [ »

0 : { »

status : affected (string)

version : n/a (string)

}

]

}

]

references : [ »

0 : { »

url : https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

}

1 : { »

url : http://www.openwall.com/lists/oss-security/2023/04/21/3 (string)

name : [oss-security] 20230421 WebKitGTK and WPE WebKit Security Advisory WSA-2023-0003 (string)

tags : [ »

0 : mailing-list (string)

]

}

2 : { »

url : https://security.gentoo.org/glsa/202305-32 (string)

name : GLSA-202305-32 (string)

tags : [ »

0 : vendor-advisory (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : text (string)

description : n/a (string)

}

]

}

]

providerMetadata : { »

orgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

shortName : mitre (string)

dateUpdated : 2023-05-30T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2023-25362 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-07T17:26:32.653Z (string)

dateReserved : 2023-02-06T00:00:00.000Z (string)

assignerOrgId : 8254265b-2729-46b6-b9e3-3dfca2d5bfca (string)

datePublished : 2023-03-02T00:00:00.000Z (string)

assignerShortName : mitre (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:*", "matchCriteriaId": "72FADC28-61B6-42DD-95E3-91A7F0A6C66D", "versionEndExcluding": "2.36.8", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely."}], "id": "CVE-2023-25362", "lastModified": "2024-11-21T07:49:26.760", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-03-02T16:15:14.570", "references": [{"source": "cve@mitre.org", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2023/04/21/3"}, {"source": "cve@mitre.org", "tags": ["Vendor Advisory"], "url": "https://bugs.webkit.org/show_bug.cgi?id=244802"}, {"source": "cve@mitre.org", "url": "https://security.gentoo.org/glsa/202305-32"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Mailing List"], "url": "http://www.openwall.com/lists/oss-security/2023/04/21/3"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://bugs.webkit.org/show_bug.cgi?id=244802"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://security.gentoo.org/glsa/202305-32"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:webkitgtk:webkitgtk:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 72FADC28-61B6-42DD-95E3-91A7F0A6C66D (string)

versionEndExcluding : 2.36.8 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely. (string)

}

]

id : CVE-2023-25362 (string)

lastModified : 2024-11-21T07:49:26.760 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 8.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-03-02T16:15:14.570 (string)

references : [ »

0 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Mailing List (string)

]

url : http://www.openwall.com/lists/oss-security/2023/04/21/3 (string)

}

1 : { »

source : cve@mitre.org (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

}

2 : { »

source : cve@mitre.org (string)

url : https://security.gentoo.org/glsa/202305-32 (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Mailing List (string)

]

url : http://www.openwall.com/lists/oss-security/2023/04/21/3 (string)

}

4 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

}

5 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

url : https://security.gentoo.org/glsa/202305-32 (string)

}

]

sourceIdentifier : cve@mitre.org (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-416 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Show plain JSON

{"affected_release": [{"advisory": "RHSA-2023:2834", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "webkit2gtk3-0:2.38.5-1.el8", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2023-05-16T00:00:00Z"}, {"advisory": "RHSA-2023:2256", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "webkit2gtk3-0:2.38.5-1.el9", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2023-05-09T00:00:00Z"}], "bugzilla": {"description": "webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps()", "id": "2175105", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2175105"}, "csaw": false, "cvss3": {"cvss3_base_score": "7.5", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H", "status": "verified"}, "cwe": "CWE-94->CWE-416", "details": ["A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely."], "name": "CVE-2023-25362", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "webkitgtk", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "webkitgtk3", "product_name": "Red Hat Enterprise Linux 7"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Out of support scope", "package_name": "webkitgtk4", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2022-07-13T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2023-25362\nhttps://nvd.nist.gov/vuln/detail/CVE-2023-25362\nhttps://bugs.webkit.org/show_bug.cgi?id=244802"], "threat_severity": "Moderate"}

{

affected_release : [ »

0 : { »

advisory : RHSA-2023:2834 (string)

cpe : cpe:/a:redhat:enterprise_linux:8 (string)

package : webkit2gtk3-0:2.38.5-1.el8 (string)

product_name : Red Hat Enterprise Linux 8 (string)

release_date : 2023-05-16T00:00:00Z (string)

}

1 : { »

advisory : RHSA-2023:2256 (string)

cpe : cpe:/a:redhat:enterprise_linux:9 (string)

package : webkit2gtk3-0:2.38.5-1.el9 (string)

product_name : Red Hat Enterprise Linux 9 (string)

release_date : 2023-05-09T00:00:00Z (string)

}

]

bugzilla : { »

description : webkitgtk: heap-use-after-free in WebCore::RenderLayer::repaintBlockSelectionGaps() (string)

id : 2175105 (string)

url : https://bugzilla.redhat.com/show_bug.cgi?id=2175105 (string)

}

csaw : false (boolean)

cvss3 : { »

cvss3_base_score : 7.5 (string)

cvss3_scoring_vector : CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H (string)

status : verified (string)

}

cwe : CWE-94->CWE-416 (string)

details : [ »

0 : A use-after-free vulnerability in WebCore::RenderLayer::repaintBlockSelectionGaps in WebKitGTK before 2.36.8 allows attackers to execute code remotely. (string)

]

name : CVE-2023-25362 (string)

package_state : [ »

0 : { »

cpe : cpe:/o:redhat:enterprise_linux:6 (string)

fix_state : Out of support scope (string)

package_name : webkitgtk (string)

product_name : Red Hat Enterprise Linux 6 (string)

}

1 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : webkitgtk3 (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

2 : { »

cpe : cpe:/o:redhat:enterprise_linux:7 (string)

fix_state : Out of support scope (string)

package_name : webkitgtk4 (string)

product_name : Red Hat Enterprise Linux 7 (string)

}

]

public_date : 2022-07-13T00:00:00Z (string)

references : [ »

0 : https://www.cve.org/CVERecord?id=CVE-2023-25362 https://nvd.nist.gov/vuln/detail/CVE-2023-25362 https://bugs.webkit.org/show_bug.cgi?id=244802 (string)

]

threat_severity : Moderate (string)

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object