Hutool vulnerabilities
We track 4 vulnerabilities in Hutool products. 4 are rated high or critical, and none are known to be exploited. The most recent was published on December 27, 2023.
Latest Hutool vulnerabilities
- 7.5 High severity
Hutool: Loop with Unreachable Exit Condition
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
- 7.1 High severity
Hutool: Incorrect Permission Assignment for Critical Resource
Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.
- 7.5 High severity
Json-java: Out-of-bounds Write
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.
- 7.5 High severity
Hutool: Out-of-bounds Write
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.