hutool kayıtları
hutool üreticisine ait 15 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %73,3
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-787 Out-of-bounds Write4
- CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')3
- CWE-295 Improper Certificate Validation1
- CWE-404 Improper Resource Shutdown or Release1
- CWE-502 Deserialization of Untrusted Data1
- CWE-732 Incorrect Permission Assignment for Critical Resource1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
15 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-24163İstismar yok | SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.hutool · hutool · CWE-89 | Kritik9,8 | — | %1,4 | 31 Oca 2023 |
39İzleyin | CVE-2022-22885İstismar yok | Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.hutool · hutool · CWE-295 | Kritik9,8 | — | %1,3 | 16 Şub 2022 |
39İzleyin | CVE-2023-24162İstismar yok | Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parametehutool · hutool · CWE-502 | Kritik9,8 | — | %1,3 | 31 Oca 2023 |
39İzleyin | CVE-2023-42277İstismar yok | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.hutool · hutool · CWE-120 | Kritik9,8 | — | %0,9 | 8 Eyl 2023 |
39İzleyin | CVE-2023-42276İstismar yok | hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.hutool · hutool · CWE-120 | Kritik9,8 | — | %0,9 | 8 Eyl 2023 |
31İzleyin | CVE-2018-17297Kavram kanıtı | The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequhutool · hutool · CWE-22 | Yüksek7,5 | — | %2,7 | 21 Eyl 2018 |
30İzleyin | CVE-2022-45688Kavram kanıtı | A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JShutool · hutool · CWE-787 | Yüksek7,5 | — | %1,2 | 13 Ara 2022 |
30İzleyin | CVE-2022-45690İstismar yok | A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denialhutool · hutool · CWE-787 | Yüksek7,5 | — | %1,0 | 13 Ara 2022 |
30İzleyin | CVE-2022-4565İstismar yok | Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumptionhutool · hutool · CWE-404 | Yüksek7,5 | — | %0,9 | 16 Ara 2022 |
30İzleyin | CVE-2023-42278İstismar yok | hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().hutool · hutool · CWE-120 | Yüksek7,5 | — | %0,8 | 8 Eyl 2023 |
30İzleyin | CVE-2022-45689İstismar yok | hutool-json v5.8.10 was discovered to contain an out of memory error.hutool · hutool · CWE-787 | Yüksek7,5 | — | %0,8 | 13 Ara 2022 |
30İzleyin | CVE-2023-51075İstismar yok | hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function.hutool · hutool · CWE-835 | Yüksek7,5 | — | %0,7 | 27 Ara 2023 |
30İzleyin | CVE-2023-51080İstismar yok | The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.hutool · hutool · CWE-787 | Yüksek7,5 | — | %0,6 | 27 Ara 2023 |
28İzleyin | CVE-2023-33695İstismar yok | Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/ihutool · hutool · CWE-732 | Yüksek7,1 | — | %0,2 | 13 Haz 2023 |
26İzleyin | CVE-2025-56769İstismar yok | An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary methhutool · hutool · CWE-77 | Orta6,5 | — | %0,3 | 25 Eyl 2025 |
- CVE-2023-2416339İzleyin
SQL Inection vulnerability in Dromara hutool before 5.8.21 allows attacker to execute arbitrary code via the aviator template engine.
KritikCVSS 9,8İstismar yokEPSS %1hutool · hutool31 Oca 2023
- CVE-2022-2288539İzleyin
Hutool v5.7.18's HttpRequest was discovered to ignore all TLS/SSL certificate validation.
KritikCVSS 9,8İstismar yokEPSS %1hutool · hutool16 Şub 2022
- CVE-2023-2416239İzleyin
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml paramete
KritikCVSS 9,8İstismar yokEPSS %1hutool · hutool31 Oca 2023
- CVE-2023-4227739İzleyin
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonObject.putByPath.
KritikCVSS 9,8İstismar yokEPSS %1hutool · hutool8 Eyl 2023
- CVE-2023-4227639İzleyin
hutool v5.8.21 was discovered to contain a buffer overflow via the component jsonArray.
KritikCVSS 9,8İstismar yokEPSS %1hutool · hutool8 Eyl 2023
- CVE-2018-1729731İzleyin
The unzip function in ZipUtil.java in Hutool before 4.1.12 allows remote attackers to overwrite arbitrary files via directory traversal sequ
YüksekCVSS 7,5Kavram kanıtıEPSS %3hutool · hutool21 Eyl 2018
- CVE-2022-4568830İzleyin
A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JS
YüksekCVSS 7,5Kavram kanıtıEPSS %1hutool · hutool13 Ara 2022
- CVE-2022-4569030İzleyin
A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a Denial
YüksekCVSS 7,5İstismar yokEPSS %1hutool · hutool13 Ara 2022
- CVE-2022-456530İzleyin
Dromara HuTool cn.hutool.core.util.ZipUtil.java resource consumption
YüksekCVSS 7,5İstismar yokEPSS %1hutool · hutool16 Ara 2022
- CVE-2023-4227830İzleyin
hutool v5.8.21 was discovered to contain a buffer overflow via the component JSONUtil.parse().
YüksekCVSS 7,5İstismar yokEPSS %1hutool · hutool8 Eyl 2023
- CVE-2022-4568930İzleyin
hutool-json v5.8.10 was discovered to contain an out of memory error.
YüksekCVSS 7,5İstismar yokEPSS %1hutool · hutool13 Ara 2022
- CVE-2023-5107530İzleyin
hutool-core v5.8.23 was discovered to contain an infinite loop in the StrSplitter.splitByRegex function.
YüksekCVSS 7,5İstismar yokEPSS %1hutool · hutool27 Ara 2023
- CVE-2023-5108030İzleyin
The NumberUtil.toBigDecimal method in hutool-core v5.8.23 was discovered to contain a stack overflow.
YüksekCVSS 7,5İstismar yokEPSS %1hutool · hutool27 Ara 2023
- CVE-2023-3369528İzleyin
Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/i
YüksekCVSS 7,1İstismar yokEPSS %0hutool · hutool13 Haz 2023
- CVE-2025-5676926İzleyin
An issue was discovered in chinabugotech hutool before 5.8.4 allowing attackers to execute arbitrary expressions that lead to arbitrary meth
OrtaCVSS 6,5İstismar yokEPSS %0hutool · hutool25 Eyl 2025