Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hutool hutool vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2022-4565
A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been dis...
Hutool Hutool
NA
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool prior to 5.8.21 allows malicious user to execute arbitrary code via the aviator template engine.
Hutool Hutool
570
VMScore
CVE-2018-17297
The unzip function in ZipUtil.java in Hutool prior to 4.1.12 allows remote malicious users to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.
Hutool Hutool
NA
CVE-2023-33695
Hutool v5.8.17 and below exists to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.
Hutool Hutool
668
VMScore
CVE-2022-22885
Hutool v5.7.18's HttpRequest exists to ignore all TLS/SSL certificate validation.
Hutool Hutool 5.7.18
2 Github repositories
NA
CVE-2023-42276
hutool v5.8.21 exists to contain a buffer overflow via the component jsonArray.
Hutool Hutool 5.8.21
NA
CVE-2023-42277
hutool v5.8.21 exists to contain a buffer overflow via the component jsonObject.putByPath.
Hutool Hutool 5.8.21
NA
CVE-2023-42278
hutool v5.8.21 exists to contain a buffer overflow via the component JSONUtil.parse().
Hutool Hutool 5.8.21
NA
CVE-2022-45689
hutool-json v5.8.10 exists to contain an out of memory error.
Hutool Hutool 5.8.10
NA
CVE-2022-45690
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows malicious users to cause a Denial of Service (DoS) via crafted JSON or XML data.
Hutool Hutool 5.8.10
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3380
CVE-2024-1694
local file inclusion
CVE-2024-5645
CVE-2024-24919
XSS
CVE-2024-36774
CVE-2024-21306
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »