CVE-2024-23080

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.
Configurations

No configuration.

History

21 Nov 2024, 08:56

Type Values Removed Values Added
References () http://joda.com - () http://joda.com -
References () https://gist.github.com/LLM4IG/6614bfa658295d7af07a6d37e06db27f - () https://gist.github.com/LLM4IG/6614bfa658295d7af07a6d37e06db27f -
References () https://github.com/JodaOrg/joda-time - () https://github.com/JodaOrg/joda-time -

27 Aug 2024, 15:35

Type Values Removed Values Added
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.1
CWE CWE-476

11 Apr 2024, 19:15

Type Values Removed Values Added
Summary
  • (es) Se descubrió que Joda Time v2.12.5 contenía una NullPointerException a través del componente org.joda.time.format.PeriodFormat::wordBased(Locale).
Summary (en) Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). (en) Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

10 Apr 2024, 13:51

Type Values Removed Values Added
New CVE

Information

Published : 2024-04-10 13:51

Updated : 2024-11-21 08:56


NVD link : CVE-2024-23080

Mitre link : CVE-2024-23080

CVE.ORG link : CVE-2024-23080


JSON object : View

Products Affected

No product.

CWE
CWE-476

NULL Pointer Dereference