Dromara hutool vulnerable to SQL Injection

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...

CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...

Sql injection

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...

CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...

CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

SQL Inection vulnerability in Dromara hutool v5.8.11 allows attacker to execute arbitrary code via the aviator template engine...

PT-2023-19451 · Dromara · Hutool

Name of the Vulnerable Software and Affected Versions: Dromara hutool versions prior to 5.8.21 Description: The issue allows an attacker to execute arbitrary code via the aviator template engine. This is a SQL Injection vulnerability. Recommendations: For versions prior to 5.8.21, update to versi...

Hutool 代码问题漏洞

Hutool is a small but comprehensive Java tool library from the Chinese Dromara community. A security vulnerability exists in Dromara Hutool version v5.8.11. An attacker can exploit this vulnerability to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...

Deserialization of Untrusted Data

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

CVE-2023-24163

SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine...

CVE-2023-24162

Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter...

CVE-2023-24162

CVE-2023-24162 is a deserialization vulnerability in Dromara Hutool v5.8.11. The issue allows an attacker to achieve arbitrary code execution through XmlUtil.readObjectFromXml. Connected sources confirm the product and vulnerable component, but the documents do not provide concrete exploit detail...

PT-2023-19450 · Dromara · Dromara Hutool

Name of the Vulnerable Software and Affected Versions: Dromara Hutool version 5.8.11 Description: A deserialization issue allows an attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter. This enables the attacker to potentially gain control over the system. Recommendation...

Hutool SQL注入漏洞

Hutool is a small but comprehensive Java tools library from the Chinese Dromara community. A SQL injection vulnerability exists in Dromara hutool version v5.8.11. An attacker can exploit this vulnerability to execute arbitrary code via the pilot template engine...

CVE-2023-24163

CVE-2023-24163 describes a SQL injection in Dromara Hutool that can lead to remote code execution via the Aviator template engine. Public notes consistently cite Hutool v5.8.x ranges: vulnerable up to 5.8.21 (pre-5.8.21), with references indicating exploitation could occur through template evalua...

GHSA-47VX-FQR5-J2GW HuTool vulnerable to Uncontrolled Resource Consumption

A vulnerability classified as problematic was found in Dromara HuTool up to 5.8.10. This vulnerability affects unknown code of the file cn.hutool.core.util.ZipUtil.java. The manipulation leads to resource consumption. The attack can be initiated remotely. The exploit has been disclosed to the...

ai.foxpay.api:foxpay-sdk (>=1.0 <=1.1), ai.genauth:genauth-java-sdk (=3.1.11) +1490 more potentially affected by CVE-2022-4565 via cn.hutool:hutool-core (>=4.0.0 <=5.8.10)

cn.hutool:hutool-core MAVEN version =4.0.0, =1.0, =j8.2.2.0, =j8.2.2.0, =Finchley.SR2.SR1, =Finchley.SR4, =j8.2.2.0, =Finchley.SR2.SR1, =Finchley.SR2.SR1, =Finchley.SR4, =j8.2.2.0, =j8.2.2.0, =1.0.2, =1.0.4.R, =1.0.6.R and more Source cves: CVE-2022-4565 Source advisory: OSV:GHSA-47VX-FQR5-J2GW...