CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...

cn.bjdd301:core-mvc (1.0.0), org.thlws:payment-bestpay (1.0.1) +1 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.1)

cn.hutool:hutool-all MAVEN version 4.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.bjdd301:core-mvc 1.0.0 - org.thlws:payment-bestpay 1.0.1 - org.thlws:payment-wechat 1.0.3 Source cves: CVE-2023-2416...

com.heytap.ads.omni:omni-api-sdk (>=1.0.0, <=1.1.0), com.icexxx:icewx (1.0.0) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.2)

cn.hutool:hutool-all MAVEN version 4.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.heytap.ads.omni:omni-api-sdk =1.0.0, =1.1.0 - com.icexxx:icewx 1.0.0 Source cves: CVE-2023-24163 Source advisory:...

net.mingsoft:ms-base (>=1.0.3, <=1.0.8), net.mingsoft:ms-basic (>=1.0.5, <=1.0.7) +8 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.3)

cn.hutool:hutool-all MAVEN version 4.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - net.mingsoft:ms-base =1.0.3, =1.0.5, =1.0.0, =4.6.3-snapshots, =1.0.4, =1.0.0, =1.0.4, =1.0.0, =1.0.4 -...

com.icexxx:icewx (1.0.1), com.ueboot:ueboot-parent (>=2.0.1, <=2.0.3) +7 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.4)

cn.hutool:hutool-all MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.icexxx:icewx 1.0.1 - com.ueboot:ueboot-parent =2.0.1, =2.0.3 - org.t-io:tio-core 2.0.6.v20180205-release -...

cn.virens:virens-util (>=1.0.0, <=1.0.1), com.github.youyinnn:you-im (1.0) +13 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.5)

cn.hutool:hutool-all MAVEN version 4.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.virens:virens-util =1.0.0, =1.0.0.v20180413-release, =1.0.0.v20180413-release, =2.1.2, =2.1.2, =2.1.7 -...

cn.spring-up:spring-co (0.1), cn.spring-up:spring-import (0.1) +2 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.6)

cn.hutool:hutool-all MAVEN version 4.0.6 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.spring-up:spring-co 0.1 - cn.spring-up:spring-import 0.1 - cn.spring-up:spring-instance 0.1 - com.zhazhapan:util 1.0...

com.github.guochaojava:winter-wechat (>=0.0.1, <=0.0.3), com.icexxx:icewx (1.0.3) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.7)

cn.hutool:hutool-all MAVEN version 4.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.guochaojava:winter-wechat =0.0.1, =0.0.3 - com.icexxx:icewx 1.0.3 Source cves: CVE-2023-24163 Source advisor...

com.github.youyinnn:you-im (>=0.5, <=0.7.1), com.icexxx:icegen (1.0.0) +9 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.8)

cn.hutool:hutool-all MAVEN version 4.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.github.youyinnn:you-im =0.5, =1.0.4, =1.0.5 - org.t-io:tio-core 2.1.0.v20180328-release -...

cn.pa4j:act-nutzdao (1.0), com.icexxx:icegen (1.0.1) +14 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.9)

cn.hutool:hutool-all MAVEN version 4.0.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.pa4j:act-nutzdao 1.0 - com.icexxx:icegen 1.0.1 - com.icexxx:icetask 1.0 -...

org.j-im:jim-client (3.0.0.v20200501-release), org.j-im:jim-common (>=2.0.0.v20180520-release, <=2.5.0.v20181115-release) +12 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.0.10)

cn.hutool:hutool-all MAVEN version 4.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - org.j-im:jim-client 3.0.0.v20200501-release - org.j-im:jim-common =2.0.0.v20180520-release, =2.0.0.v20180520-release,...

org.t-io:tio-core (3.0.3.v20180620-release), org.t-io:tio-flash-policy-server (3.0.3.v20180620-release) +6 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.0)

cn.hutool:hutool-all MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - org.t-io:tio-core 3.0.3.v20180620-release - org.t-io:tio-flash-policy-server 3.0.3.v20180620-release -...

org.nutz:nutzboot-starter-tio (>=2.2.3, <=2.2.5), org.nutz:nutzboot-starter-tio-mvc (>=2.2.3, <=2.2.5) +8 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.2)

cn.hutool:hutool-all MAVEN version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - org.nutz:nutzboot-starter-tio =2.2.3, =2.2.3, =2.2.5 - org.t-io:tio-core 3.1.3.v20180720-release -...

com.grjky:cloud-starter (1.0.0), io.github.jos12580:cloud-grjky-starter (1.0.0) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.3)

cn.hutool:hutool-all MAVEN version 4.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - com.grjky:cloud-starter 1.0.0 - io.github.jos12580:cloud-grjky-starter 1.0.0 Source cves: CVE-2023-24163 Source advisor...

cn.jiangzeyin.fast-boot:common-boot (1.2.3), cn.jiangzeyin.fast-boot:common-redis (>=1.2.3, <=1.2.4) +8 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.9)

cn.hutool:hutool-all MAVEN version 4.1.9 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot 1.2.3 - cn.jiangzeyin.fast-boot:common-redis =1.2.3, =1.2.4 -...

cn.zhangsw:mysql2mybatis-generator-ui (>=1.0-release, <=1.1.sr01-release), com.github.lqccan:wechat-work-bot (>=1.0, <=1.1) +3 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.12)

cn.hutool:hutool-all MAVEN version 4.1.12 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.zhangsw:mysql2mybatis-generator-ui =1.0-release, =1.0, =1.0, =1.0.3-snathost Source cves: CVE-2023-24163 Source...

cn.jiangzeyin.fast-boot:common-boot (1.2.5), cn.jiangzeyin.fast-boot:common-redis (1.2.5) +5 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.14)

cn.hutool:hutool-all MAVEN version 4.1.14 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot 1.2.5 - cn.jiangzeyin.fast-boot:common-redis 1.2.5 - com.icexxx:icegen 1.0.2 -...

io.gitee.quanwenz:common-redis-tools (>=1.0.3-20210907-6.release, <=2.1.1-20220530-1) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.15)

cn.hutool:hutool-all MAVEN version 4.1.15 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - io.gitee.quanwenz:common-redis-tools =1.0.3-20210907-6.release, =2.1.1-20220530-1 Source cves: CVE-2023-24163 Source...

cn.jiangzeyin.fast-boot:common-boot (>=1.2.6, <=1.2.12), cn.jiangzeyin.fast-boot:common-redis (>=1.2.6, <=1.2.12) potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.16)

cn.hutool:hutool-all MAVEN version 4.1.16 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.jiangzeyin.fast-boot:common-boot =1.2.6, =1.2.6, =1.2.12 Source cves: CVE-2023-24163 Source advisory:...

cn.structured:structure-common (>=1.0.1.release, <=1.2.0.release), cn.structured:structure-jwt-security-starter (>=1.0.1.release, <=1.2.0.release) +16 more potentially affected by CVE-2023-24163 via cn.hutool:hutool-all (4.1.19)

cn.hutool:hutool-all MAVEN version 4.1.19 is affected by a known vulnerability. The following packages have a transitive dependency on cn.hutool:hutool-all and may be impacted: - cn.structured:structure-common =1.0.1.release, =1.0.1.release, =1.0.1.release, =1.0.1.release, =1.0.1.release,...