CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

PT-2022-6900

Name of the Vulnerable Software and Affected Versions hutool-json version 5.8.10 org.json:json versions prior to 20230227 Bitbucket Data Center and Server versions 7.17.0 through 8.12.0 Description A stack overflow in the XML.toJSONObject component allows attackers to cause a Denial of Service Do...

Hutool 缓冲区错误漏洞

Hutool is a small but comprehensive library of Java tools for the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.10, which originates from a stack overflow in the XML.toJSONObject component and allows attackers to cause a denial of service DoS via crafted JSON o...

PT-2022-6898 · Unknown · Hutool-Json

Name of the Vulnerable Software and Affected Versions: hutool-json version 5.8.10 Description: The issue is related to a stack overflow in the org.json.JSONTokener.nextValue component of the hutool-json library, which can be exploited to cause a Denial of Service DoS via crafted JSON or XML data...

PT-2022-6899 · Unknown · Hutool-Json

Name of the Vulnerable Software and Affected Versions: hutool-json version 5.8.10 Description: The issue in hutool-json is related to an out of memory error, which can be exploited by a remote attacker to cause a denial of service. This is due to a buffer overflow in memory. Recommendations: For...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

hutool-json vulnerable to memory exhaustion

hutool-json v5.8.10 was discovered to contain an out of memory error...

CVE-2022-45688

CVE-2022-45688 : Hutool-JSON's XML.toJSONObject has a stack-based overflow that can cause a DoS via crafted JSON/XML data. The connected documents confirm the vulnerability and impact (availability impact: HIGH) with no public exploit details or remediation/version fixes provided in the supplied ...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

Improper Certificate Validation

cn.hutool:hutool-http is vulnerable to Improper certificate validation. The vulnerability exists due to the insufficient validations of TLS/SSL certificates in verify function in TrustAnyHostnameVerifierof class...

GHSA-P7W9-8MXW-P3G7 Improper Certificate Validation in Hutool

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

Improper Certificate Validation in Hutool

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

Improper Certificate Validation

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

Design/Logic Flaw

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

CVE-2022-22885 affects Hutool v5.7.18: Hutool.HttpRequest incorrectly ignores TLS/SSL certificate validation, creating a trust-management vulnerability that enables network-based MITM attacks. CVSS3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 9.8; CVSS2.0 also 7.5. Exploitation details ...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

PT-2022-15716 · Hutool · Hutool

Name of the Vulnerable Software and Affected Versions: Hutool version 5.7.18 Description: The issue concerns the ignoring of all TLS/SSL certificate validation in Hutool's HttpRequest. Recommendations: For Hutool version 5.7.18, update to a version that properly validates TLS/SSL certificates to...