Critical · 9.8 CVE-2023-24163 EUVD-2023-0359GHSA-6c25-cxcc-pmc4

Dromara hutool vulnerable to SQL Injection

Published Jan 31, 2023 · Updated Mar 27, 2025 · Assigned by mitre

Description

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.

Ecosystem	Package	Affected	Fixed	Record
Maven	cn.hutool:hutool-all	< 5.8.21	5.8.21	GHSA-6c25-cxcc-pmc4