Skip to content
OpenAdvisories

Package · Maven

cn.hutool:hutool-core

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2023-51080

    hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method

    The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.

    cn.hutool:hutool-core Maven
  • High 7.5
    CVE-2023-51075

    hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function

    hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.

    cn.hutool:hutool-core Maven
  • High 7.5
    CVE-2023-42278

    hutool Buffer Overflow vulnerability

    hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().

    cn.hutool:hutool-core cn.hutool:hutool-json Maven
  • High 7.1
    CVE-2023-33695

    Insecure Temporary File in HuTool

    Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

    cn.hutool:hutool-core Maven
  • High 7.5
    CVE-2018-17297 Public exploit

    Unzip function in ZipUtil.java in Hutool allows remote attackers to overwrite arbitrary files via directory traversal

    The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequences in a filename within a ZIP archive.

    cn.hutool:hutool-core cn.hutool:hutool-all cn.hutool:hutool-parent Maven