Hutool 缓冲区错误漏洞

Hutool is a small but complete Java tool library for the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.10, which originates from a stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component, allowing an attacker to cause a denial of servic...

CVE-2022-45689

CVE-2022-45689 concerns hutool-json v5.8.10, where an out-of-memory condition can be triggered, leading to denial of service. Public sources (Red Hat, Veracode, OSV, GHSA, CNNVD, NVD) consistently describe memory exhaustion as the issue, with the impact described as crash/DoS. No concrete remedia...

CVE-2022-45690

A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial of Service DoS via crafted JSON or XML data...

PT-2022-6898 · Unknown · Hutool-Json

Name of the Vulnerable Software and Affected Versions: hutool-json version 5.8.10 Description: The issue is related to a stack overflow in the org.json.JSONTokener.nextValue component of the hutool-json library, which can be exploited to cause a Denial of Service DoS via crafted JSON or XML data...

hutool-json vulnerable to memory exhaustion

hutool-json v5.8.10 was discovered to contain an out of memory error...

PT-2022-6899 · Unknown · Hutool-Json

Name of the Vulnerable Software and Affected Versions: hutool-json version 5.8.10 Description: The issue in hutool-json is related to an out of memory error, which can be exploited by a remote attacker to cause a denial of service. This is due to a buffer overflow in memory. Recommendations: For...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

CVE-2022-45688

CVE-2022-45688 : Hutool-JSON's XML.toJSONObject has a stack-based overflow that can cause a DoS via crafted JSON/XML data. The connected documents confirm the vulnerability and impact (availability impact: HIGH) with no public exploit details or remediation/version fixes provided in the supplied ...

CVE-2022-45689

hutool-json v5.8.10 was discovered to contain an out of memory error...

Improper Certificate Validation

cn.hutool:hutool-http is vulnerable to Improper certificate validation. The vulnerability exists due to the insufficient validations of TLS/SSL certificates in verify function in TrustAnyHostnameVerifierof class...

GHSA-P7W9-8MXW-P3G7 Improper Certificate Validation in Hutool

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

Improper Certificate Validation in Hutool

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

Improper Certificate Validation

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

Design/Logic Flaw

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

CVE-2022-22885

CVE-2022-22885 affects Hutool v5.7.18: Hutool.HttpRequest incorrectly ignores TLS/SSL certificate validation, creating a trust-management vulnerability that enables network-based MITM attacks. CVSS3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with base score 9.8; CVSS2.0 also 7.5. Exploitation details ...

CVE-2022-22885

Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation...

PT-2022-15716 · Hutool · Hutool

Name of the Vulnerable Software and Affected Versions: Hutool version 5.7.18 Description: The issue concerns the ignoring of all TLS/SSL certificate validation in Hutool's HttpRequest. Recommendations: For Hutool version 5.7.18, update to a version that properly validates TLS/SSL certificates to...