CVE-2023-24162
9.8CRITICALDeserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
게시됨: 1/31/2023업데이트됨: 3/27/2025
설명
Deserialization vulnerability in Dromara Hutool v5.8.11 allows attacker to execute arbitrary code via the XmlUtil.readObjectFromXml parameter.
AI 분석AI 기반
영향받는 제품
hutoolhutool
5.8.11
참조
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory
- https://gitee.com/dromara/hutool/issues/I6AEX2ExploitThird Party Advisory
- https://github.com/dromara/hutool/issues/2855ExploitThird Party Advisory