OSV-2022-764

See a problem?
Import Source
https://github.com/google/oss-fuzz-vulns/blob/main/vulns/apache-commons-jxpath/OSV-2022-764.yaml
JSON Data
https://api.osv.dev/v1/vulns/OSV-2022-764
Published
2022-08-21T00:00:44.740591Z
Modified
2022-08-21T00:00:44.740834Z
Summary
Security exception in org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize
Details

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=50458

Crash type: Security exception
Crash state:
org.apache.commons.jxpath.ri.compiler.CoreOperation.parenthesize
org.apache.commons.jxpath.ri.compiler.CoreOperation.toString
com.code_intelligence.jazzer.runtime.TraceDataFlowNativeCallbacks.traceCmpInt
References

Affected packages

OSS-Fuzz / apache-commons-jxpath

Package

Name
apache-commons-jxpath
Purl
pkg:generic/apache-commons-jxpath

Affected ranges

Type
GIT
Repo
https://github.com/apache/commons-jxpath.git
Events
Introduced
192f4c92727cf5387a8043525a1e1e1533c9ac69
Fixed
3e5e8b3e816e45bc9c1bcc3e630bb688a775d05c

Ecosystem specific 

{
    "severity": "LOW"
}