CVE-2023-24162
9.8CRITICALDeserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
Published: 1/31/2023Updated: 3/27/2025
Description
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
AI AnalysisPowered by AI
Affected Products
hutoolhutool
5.8.11
References
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory