GMS-2022-5657: Jadx-gui vulnerable to swing HTML Denial of Service (DoS) attack

October 20, 2022

Using jadx-gui to open a special zip file with entry containing HTML sequence like <html><frame> will cause interface to get stuck and throw exceptions

References

github.com/advisories/GHSA-3r7j-8mqh-6qhx
github.com/skylot/jadx/releases/tag/v1.4.5
github.com/skylot/jadx/security/advisories/GHSA-3r7j-8mqh-6qhx
www.oracle.com/java/technologies/javase/seccodeguide.html

Code Behaviors & Features

Detect and mitigate GMS-2022-5657 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →