Lucene search
K

7 matches found

OSV
OSV
added 2023/12/27 9:31 p.m.1 views

GHSA-M5HF-M3R2-XQ53 hutool-core was discovered to contain a stack overflow via NumberUtil.toBigDecimal method

The NumberUtil.toBigDecimal method in hutool-core was discovered to contain a stack overflow...

7.5CVSS6AI score0.00078EPSS
Exploits1References4
ATTACKERKB
ATTACKERKB
added 2023/12/27 9:15 p.m.4 views

CVE-2023-51080

The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow...

7.5CVSS5.9AI score0.00078EPSS
Exploits1References2
Prion
Prion
added 2023/12/27 9:15 p.m.13 views

Stack overflow

The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow...

5CVSS7.5AI score0.00078EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2023/12/27 12:0 a.m.13 views

CVE-2023-51080

The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow...

7.7AI score0.00078EPSS
Exploits1References1
CVE
CVE
added 2023/12/27 12:0 a.m.61 views

CVE-2023-51080

CVE-2023-51080 affects hutool-core v5.8.23, where NumberUtil.toBigDecimal is vulnerable to a StackOverflowError (noted in Red Hat, Veracode, OSV, and other feeds) and can lead to application crash/DoS. The root cause is a stack overflow in toBigDecimal when handling NaN values per Veracode’s desc...

7.5CVSS7.4AI score0.00078EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2023/12/27 12:0 a.m.3 views

PT-2023-31758 · Unknown · Hutool-Core

Name of the Vulnerable Software and Affected Versions: hutool-core version 5.8.23 Description: The NumberUtil.toBigDecimal method in hutool-core was discovered to contain a stack overflow. Recommendations: For hutool-core version 5.8.23, consider disabling the toBigDecimal method in the NumberUti...

7.5CVSS7.4AI score0.00078EPSS
Exploits1References10
CNNVD
CNNVD
added 2023/12/27 12:0 a.m.2 views

Hutool Security Vulnerabilities

Hutool is a small but complete Java tool library from the Chinese Dromara community. A security vulnerability exists in Hutool version v5.8.23, which stems from a stack overflow vulnerability in the NumberUtil.toBigDecimal method...

7.5CVSS7.1AI score0.00078EPSS
Exploits1References2
Rows per page
Query Builder