Hutool vulnerabilities

4 known vulnerabilities in Hutool from Hutool. 4 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Hutool: Loop with Unreachable Exit Condition

  CVE-2023-51075Dec 27, 2023Hutool

  hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

• 7.1 High severity

  Hutool: Incorrect Permission Assignment for Critical Resource

  CVE-2023-33695Jun 13, 2023Hutool

  Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

• 7.5 High severity

  Json-java: Out-of-bounds Write

  CVE-2022-45690Dec 13, 2022StlearyEPSS 1.01%

  A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.

• 7.5 High severity

  Hutool: Out-of-bounds Write

  CVE-2022-45688Dec 13, 2022HutoolEPSS 1.26%

  A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSON or XML data.