Description
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | cn.hutool:hutool-http | < 5.7.19 | 5.7.19 | GHSA-p7w9-8mxw-p3g7 |
Critical · 9.8
CVE-2022-22885
EUVD-2022-1118GHSA-p7w9-8mxw-p3g7
Improper Certificate Validation in Hutool
Published Feb 16, 2022 · Updated Aug 3, 2024 · Assigned by mitre