CVE-2022-41404: org.ini4j allows attackers to cause a Denial of Service (DoS)

October 12, 2022 (updated June 9, 2025)

An issue in the fetch() method in the BasicProfile class of org.ini4j before v0.5.4 allows attackers to cause a Denial of Service (DoS) via unspecified vectors.

References

github.com/Checkmarx/Vulnerabilities-Proofs-of-Concept/tree/main/2022/CVE-2022-41404
github.com/advisories/GHSA-jr6h-r7vg-f9mc
lists.debian.org/debian-lts-announce/2022/11/msg00037.html
nvd.nist.gov/vuln/detail/CVE-2022-41404
sourceforge.net/p/ini4j/bugs/56
sourceforge.net/projects/ini4j

Code Behaviors & Features

Detect and mitigate CVE-2022-41404 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →