Description
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | cn.hutool:hutool-core | >= 5.8.22, < 5.8.25 | 5.8.25 | GHSA-m5hf-m3r2-xq53 |
High · 7.5
CVE-2023-51080
EUVD-2023-3242GHSA-m5hf-m3r2-xq53
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
Published Dec 27, 2023 · Updated Aug 2, 2024 · Assigned by mitre