Lucene search
+L

6 matches found

OSV
OSV
•added 2023/06/15 3:30 p.m.•52 views

GHSA-P2QF-9VP6-3JJQ HuTool XML parsing module has blind XXE vulnerability

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference...

7.5CVSS5.1AI score0.00726EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
•added 2023/06/15 3:30 p.m.•48 views

HuTool XML parsing module has blind XXE vulnerability

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference...

7.5CVSS7AI score0.00726EPSS
SaveExploits1References5Affected Software1
OSV
OSV
•added 2023/06/15 1:15 p.m.•19 views

CVE-2023-3276

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference. The exploit has been disclos...

7.5CVSS5.3AI score0.00726EPSS
SaveExploits1References3
Mend
Mend
•added 2023/06/15 1:00 p.m.•1 views

CVE-2023-3276

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference. The exploit has been disclos...

7.5CVSS0.00726EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/06/15 12:00 a.m.•3 views

CVE-2023-3276: Improper Restriction of XML External Entity Reference

A vulnerability, which was classified as problematic, has been found in Dromara HuTool up to 5.8.19. Affected by this issue is the function readBySax of the file XmlUtil.java of the component XML Parsing Module. The manipulation leads to xml external entity reference. The exploit has been disclos...

7.5CVSS5.6AI score0.00726EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2023/06/15 12:00 a.m.•19 views

PT-2023-24008 · Dromara · Dromara Hutool

Name of the Vulnerable Software and Affected Versions: Dromara HuTool versions up to 5.8.19 Description: A problematic issue has been found in the XML Parsing Module, specifically affecting the readBySax function of the XmlUtil.java file. This issue leads to xml external entity reference. The...

7.5CVSS6.7AI score0.00726EPSS
SaveExploits1References7
Rows per page
Query Builder