4 matches found
CVE-2023-24162
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...
9.8CVSS7.7AI score0.0127EPSS
SaveExploits1References1
CVE-2023-24162
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...
9.6AI score0.0127EPSS
SaveExploits1References2
CVE-2023-24162
CVE-2023-24162 is a deserialization vulnerability in Dromara Hutool v5.8.11. The issue allows an attacker to achieve arbitrary code execution through XmlUtil.readObjectFromXml. Connected sources confirm the product and vulnerable component, but the documents do not provide concrete exploit detail...
9.8CVSS9.6AI score0.0127EPSS
SaveExploits1References2Affected Software1
20