writeups.xyz / Technical Advisory – OpenJDK – Weak Parsing Logic in java.net.InetAddress and Related Classes

Submitter : c2a

Date: 6 October 2022

Bounty : undisclosed

Vulnerabilities :

• IP Address Validation Bypass
• Hostname Validation Bypass
• URL Parsing Issue

Programs :

• OpenJDK

Authors :

• Jeff Dileo (@ChaosDatumz)

Link :
https://research.nccgroup.com/2022/10/06/technical-advisory-openjdk-weak-parsing-logic-in-java-net-inetaddress-and-related-classes/