Vulnerability GHSA-p2qf-9vp6-3jjq
High Risk
HIGH RISK
CVSS Score: 7.5
Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
3 years ago
June 15, 2023 at 03:30 PM UTC
HuTool XML parsing module has blind XXE vulnerability
4.0.0 - 5.8.19
4.0.0 - 5.8.19
Summary
HuTool XML parsing module has blind XXE vulnerability
Details
A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
2 years ago
hutool-core discovered to contain an infinite loop in the StrSplitter.splitByRegex function
4.0.0 - 5.8.23 GHSA-7m7h-rgvp-3v4r
4.0.0 - 5.8.23 GHSA-7m7h-rgvp-3v4r
High Risk
2 years ago
hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
5.8.22 - 5.8.24 GHSA-m5hf-m3r2-xq53
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
4.0.0 - 5.8.21 GHSA-7p8c-crfr-q93p
High Risk
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
4.0.0 - 5.8.21 GHSA-rr66-qh5m-w6mx
Critical
3 years ago
hutool Buffer Overflow vulnerability
4.0.0 - 5.8.21 GHSA-rxgf-r843-g53h
4.0.0 - 5.8.21 GHSA-rxgf-r843-g53h
Impacted packages
Timeline
Published
3 years ago
June 15, 2023 at 03:30 PM UTC
Last Modified
2 years ago
March 01, 2024 at 02:46 PM UTC