Improper Handling of Exceptional Conditions in Newtonsoft.Json


THE INFORMATION IN THIS ARTICLE APPLIES TO:

  • EFT v8.1 and later

DISCUSSION

A recent scan of third party libraries and applications used by EFT revealed that an application used by our Advanced Workflow Engine had a recent vulnerability reported for a library it incorporates, Newtonsoft v4.0.5.

Analysis of the finding and related code by both Globalscape and the vendor has determined the vulnerable functionality is not exposed in any way by EFT.

Details of this vulnerability can be found in the GitHub Advisory Database, #GHSA-5crp-9r3c-pv9vr.