{"id":"CVE-2024-23080","aliases":["EUVD-2024-20605","GHSA-gxgx-2mvf-9gh5"],"status":"disputed","title":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda...","description":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.0083,"percentile":0.57861,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-476"],"published":"2024-04-10T00:00:00Z","modified":"2026-07-09T01:18:53Z","products":[{"vendor":"joda","product":"joda_time"}],"references":[{"url":"https://github.com/JodaOrg/joda-time","tags":["x_transferred"]},{"url":"https://gist.github.com/LLM4IG/6614bfa658295d7af07a6d37e06db27f","tags":["x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-23080"},{"url":"http://joda.com"},{"url":"https://github.com/advisories/GHSA-gxgx-2mvf-9gh5"}],"sources":{"cve":[{"id":"CVE-2024-23080","description":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.","status":"disputed","published":"2024-04-10T00:00:00Z","modified":"2026-07-09T00:30:05.964Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:34:05.823187Z"}],"euvd":[{"id":"EUVD-2024-20605","description":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.","status":"published","published":"2024-04-10T00:00:00Z","modified":"2026-07-09T00:30:05Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"updated_at":"2026-11-02T18:20:05.313723Z"}],"ghsa":[{"id":"GHSA-gxgx-2mvf-9gh5","title":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda...","description":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale).","status":"published","published":"2024-04-10T15:30:40Z","modified":"2024-08-27T18:32:36Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:58:06.582466Z"}],"nvd":[{"id":"CVE-2024-23080","description":"Joda Time v2.12.5 was discovered to contain a NullPointerException via the component org.joda.time.format.PeriodFormat::wordBased(Locale). NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based on a tool that is not sufficiently robust for vulnerability identification.","status":"disputed","published":"2024-04-10T13:51:38.547Z","modified":"2026-07-09T01:18:53.04Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:09:49.255123Z"}]}}