CVE-2024-23079
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
A NullPointerException was discovered in JGraphT Core version 1.5.2 within the compare method of the ToleranceDoubleComparator class. However, multiple third parties dispute the existence of this vulnerability, suggesting the report may be based on an insufficiently robust tool.
Risk Assessment
The risk to the organization is low, as the vulnerability is disputed and its impact is limited to a potential exception that could cause application disruption under specific conditions.
Recommendation
It is recommended to monitor updates for the JGraphT Core library and verify whether the issue is confirmed by the vendor. In the meantime, consider implementing temporary mitigations such as input validation before using the compare method.
Original NVD description (English source)
JGraphT Core v1.5.2 was discovered to contain a NullPointerException via the component org.jgrapht.alg.util.ToleranceDoubleComparator::compare(Double, Double). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.