2 matches found
PT-2023-19450 · Dromara · Dromara Hutool
Name of the Vulnerable Software and Affected Versions: Dromara Hutool version 5.8.11 Description: A deserialization issue allows an attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter. This enables the attacker to potentially gain control over the system. Recommendation...
9.8CVSS9.7AI score0.0127EPSS
SaveExploits1References7
Hutool 代码问题漏洞
Hutool is a small but comprehensive Java tool library from the Chinese Dromara community. A security vulnerability exists in Dromara Hutool version v5.8.11. An attacker can exploit this vulnerability to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...
9.8CVSS8.9AI score0.0127EPSS
SaveExploits1References3
20