Vulnerability GHSA-7m7h-rgvp-3v4r
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
2 years ago
December 27, 2023 at 09:31 PM UTC
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
4.0.0 - 5.8.23
4.0.0 - 5.8.23
Summary
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
Details
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function. This vulnerability allows attackers to cause a Denial of Service (DoS) via manipulation of the first two parameters.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 years ago
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
High Risk
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rxgf-r843-g53h
4.0.0 - 5.8.21 GHSA-rxgf-r843-g53h
High Risk
3 years ago
HuTool XML parsing module has blind XXE vulnerability
4.0.0 - 5.8.19 GHSA-p2qf-9vp6-3jjq
4.0.0 - 5.8.19 GHSA-p2qf-9vp6-3jjq
Impacted packages
Timeline
Published
2 years ago
December 27, 2023 at 09:31 PM UTC
Last Modified
2 years ago
February 16, 2024 at 08:12 AM UTC