Vulnerability

CVE-2024-23080

Report advisory or correction

CVSS Score

Unscored

CVSS Vector

Not Recorded

CWE

CWE-476

References

http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-23080

[CVE-2024-23080] CWE-476: NULL Pointer Dereference

Description

Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.

See joda-time/joda-time package information