CVE-2023-24162
9.8CRITICALDeserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
Veröffentlicht: 1/31/2023Aktualisiert: 3/27/2025
Beschreibung
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
KI-AnalyseKI-gestützt
Betroffene Produkte
hutoolhutool
5.8.11
Referenzen
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory