Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
hutool vulnerabilities and exploits
(subscribe to this query)
7.1
CVSSv3
CVE-2023-33695
Hutool v5.8.17 and below exists to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.
Hutool Hutool
7.5
CVSSv3
CVE-2022-4565
A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been dis...
Hutool Hutool
7.5
CVSSv3
CVE-2018-17297
The unzip function in ZipUtil.java in Hutool prior to 4.1.12 allows remote malicious users to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.
Hutool Hutool
9.8
CVSSv3
CVE-2023-42276
hutool v5.8.21 exists to contain a buffer overflow via the component jsonArray.
Hutool Hutool 5.8.21
9.8
CVSSv3
CVE-2023-42277
hutool v5.8.21 exists to contain a buffer overflow via the component jsonObject.putByPath.
Hutool Hutool 5.8.21
7.5
CVSSv3
CVE-2023-42278
hutool v5.8.21 exists to contain a buffer overflow via the component JSONUtil.parse().
Hutool Hutool 5.8.21
9.8
CVSSv3
CVE-2023-24162
Deserialization vulnerability in Dromara Hutool v5.8.11 allows malicious user to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
Hutool Hutool 5.8.11
9.8
CVSSv3
CVE-2023-24163
SQL Inection vulnerability in Dromara hutool v5.8.11 allows malicious user to execute arbitrary code via the aviator template engine.
Hutool Hutool 5.8.11
7.5
CVSSv3
CVE-2023-51075
hutool-core v5.8.23 exists to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows malicious users to cause a Denial of Service (DoS) via manipulation of the first two parameters.
Hutool Hutool 5.8.23
7.5
CVSSv3
CVE-2023-51080
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 exists to contain a stack overflow.
Hutool Hutool 5.8.23
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907
hardcoded
inject
CVE-2024-20359
CVE-2024-2467
CVE-2024-4077
CVE-2024-22391
camera
CVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »