Skip to content
OpenAdvisories

Package · Maven

cn.hutool:hutool-all

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2023-24163

    Dromara hutool vulnerable to SQL Injection

    SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.

    cn.hutool:hutool-all Maven
  • Critical 9.8
    CVE-2023-24162

    Dromara Hutool Deserialization of Untrusted Data vulnerability

    Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.

    cn.hutool:hutool-all Maven
  • High 7.5
    CVE-2018-17297 Public exploit

    Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal

    The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

    cn.hutool:hutool-core cn.hutool:hutool-all cn.hutool:hutool-parent Maven